Security expert Egor Homakov of Sakurity has a tool that hackers hijack accounts on sites that use Facebook logins. Egor Homakov has hacking tool "reconnect" called.
He reported the error to Facebook a year ago, but the company fixed the bug not to be compatible with a large number of websites offering the service of the social network giant used their login process.
Reconnect uses a cross-site request forgery (CSRF), which enables users to log in to third party websites using their Facebook accounts. The vulnerability gives attackers the ability to access the accounts of the victims using the Facebook application developed by third party websites. These include services such as Mashable, Vimeo, About.me , Stumbleupon and many others.
No comments:
Post a Comment