Friday, January 22, 22:37
Home security Zello: Resets user passwords due to data breach!

Zello: Resets user passwords due to data breach!

Zello, a free one application push to talk option, revealed that it suffered a data breach that resulted in leakage user email addresses and fragmented passwords. In particular, the data breach took place after an unauthorized activity in systems the company's.


Zello is an application used by over 140 million users, with the ability to communicate with family, friends, hospital services and first responders, including through their mobile phones, using a push-to-talk application.

Zello

Zello said it discovered an unauthorized activity in one of them servers on July 8, 2020. Through this access, the intruder may have acquired access at the addresses e-mail and fragmented Zello account passwords.


More specifically, the company stated in an official announcement the following: "On July 8, 2020, we discovered an unusual activity on one of our servers. We immediately started an investigation, alerted the police and turned to a leading independent forensic company for help. "Through this investigation, we learned that an unauthorized party may have gained access to the email addresses used by our users on Zello accounts and to a fragmented version of their passwords."

Zello data breach

While Zello does not explicitly state that the intruder managed to gain access to database, it is very likely that he gained access to customer information. According to the notification, Zello Work and Zello for First Responders customers were not affected by the data breach. In addition, as Zello requires users to log in with a username and password, and usernames were not accessible, the company does not consider that accounts have been compromised.


What should Zello users do?
Zello recommends that users of its application make a mandatory reset to the passwords they have in their Zello accounts the next time they log in to the application. Also, since the attacker has gained access to the email addresses and hash passwords of Zello users, it may "break" them. passwords to access plain text passwords. The attacker can then use the list of email addresses and "broken" passwords in a credential stuffing attack, during which it will try to connect to other sites, to which users may also have an account.

Zello data breach

Therefore, all affected users should change their password on any site using the same password as the Zello account and set a unique password, which they will use only on that site. A password manager can facilitate the creation of unique passwords on each site that users visit without memorizing them.

LEAVE ANSWER

Please enter your comment!
Please enter your name here

Pohackontas
Pohackontashttps://www.secnews.gr
Every accomplishment starts with the decision to try.

LIVE NEWS

Intel CPUs Review: Core i7-10700 vs Core i7-10700K!

Over the years, the Intel series of processors (CPUs) introduced the series of overclocking models "K" and more recently the series ...

The DeLorean can return as an electric car

The DMC DeLorean has been out of production for almost 40 years, but it looks like the iconic vehicle will return as an electric car.

Windows RDP servers are used to support DDoS

Cybercrime gangs are abusing Windows Remote Desktop Protocol (RDP) systems to reinforce the unwanted ...

SEPA: He refused to pay a ransom and thousands of files were leaked

Thousands of stolen files of the Scottish Environmental Protection Agency (SEPA) have been published by hackers, after the organization refused to pay the ransom ...

Fines at Valve, Capcom and Zenimax for geo-exclusion of games

Following a European Commission investigation, a group of video game publishers was fined € 7,8 million following allegations of geo-exclusion practices. In...

Bitcoin helps the middle class survive the pandemic

Regulators still imply that Bitcoin is just a tool for criminals, but it seems that for the middle class ...

Lightworks 2021.1 for Linux, Mac and Windows has been released

Lightworks Professional Multi-Platform Video Editing Software received the first major update to Lightworks 2021.1 for Windows, Linux and Mac.

Netflix: Watch the 9 best Anime movies of all time

One of the good things about the pandemic was that many people were introduced to the anime world. And the issue with anime is ...

CHwapi: Windows BitLocker "hit" the Belgian hospital!

The CHwapi hospital in Belgium was attacked by a cyber attack on January 17, with hackers claiming to have encrypted 40 servers and 100 ...

CPU / GPU Lotteries: Newegg sells the few on the market

Hardware shortages are not uncommon, but the pandemic has worsened the situation. The whole planet is closed to ...