Epik , the controversial web registrar that frequentlycomes under firefor hosting far - right groups and individuals , hashad an immense amount of its datum spilled onto the internet in late day . The soaker , which reportedly consist of some 180 gigabytes of user registration and domain information , requital history , account credentials and more , appear to have been stolen during a hack incident involve members of the hacktivist collective Anonymous .
Now , anew reportfrom TechCrunch seems to show that the company was warned about a potentially big security defect in its platform several weeks prior to the hack .
Security researcher Corben Leo says that he reached out to Epik ’s chief executive officer , Rob Monster , in January , to ask if Epik had a bug premium program or another style to cover the exposure . Monster apparently never replied . The hack incident appear to have occurredroughly a month later , according to outlets who have viewed the data . TechCrunchreports :
Photo: JOSEP LAGO/AFP (Getty Images)
Leo told TechCrunch that a library used on Epik ’s WHOIS page for generating PDF report of public demesne phonograph record had a ten - old vulnerability that allowed anyone to remotely run codification directly on the internal server without any authentication , such as a company password .
“ You could just paste this [ line of code ] in there and execute any statement on their servers , ” Leo told TechCrunch .
It is unconfirmed if this vulnerability was used to hack the company .
Epik has been obtuse to respond to the claims about a leak . When Gizmodo initially reached out to the company on Tuesday , a spokespersontold us thatthe company was “ not aware of any rift . ” However , a day or so later , screenshots of an emailfrom Monster to users began pass on on social medium . The email partly read :
… as a precautional mensuration , I am writing to inform you of an alleged security incident involve Epik .
Our national team , working with outside expert , have been working diligently to address the office . We are aim proactive steps to decide the event . We will update you on our progression . In the meanwhile please let us know if you observe any unusual news report activity .
When reached by e-mail on Thursday , an Epik spokesperson told Gizmodo that the electronic mail was logical but said that the company had no further update than what had already been partake .
However , as of Friday , Monster seems to have been more denotative about the facts . During a multi - hour telecasting conference on his website PrayerMeeting.com , the CEO admitted that data had been stolen . The Daily Dotreports that Monster “ publicly admit that his troupe had been infract ” and said that he believed it was a backup of the caller ’s datum that had been boost .
Prior to Monster ’s admission , a number of wall socket — includingThe Recordandthe Daily Dot — analyzed the information and asserted that the samples they had look at were legitimate .
The web registrar ’s apparent data is now being sift through by numerous organizations . Distributed Denial of Secrets , a diarist non - profit dedicated to publishing leaked materials , has curated the data dumpon its website . Meanwhile , a Twitter exploiter , “ Epik Fail Data Leaks , ” claims to be posting screenshots of the data , while looking up data about ostensible exploiter .
Alt - techComputing
Daily Newsletter
Get the good tech , science , and cultivation news in your inbox day by day .
news show from the futurity , deliver to your present tense .
You May Also Like
