Uber

2022 - 9 - 16

Post cover — Image courtesy of "Evening Standard"

Uber hacked by teenager demanding higher pay for drivers (Evening Standard)

The hacker claimed to have been able to access to the company's email and cloud storage systems, and said the firm had weak security standards.

He claimed to have been able to access to the company’s email and cloud storage systems, and said the firm had weak security standards. We are in touch with law enforcement and will post additional updates here as they become available.” San Francisco-based Uber has faced criticism in the past for its handling of cybersecurity incidents.

After a serious breach, Uber says its services are operational again (NPR)

What appeared to be a lone hacker announced the breach after apparently tricking an Uber employee into providing credentials. It is not known how much data ...

Then, posing as a fellow worker, the hacker bombarded the employee with text messages asking them to confirm that they had logged into their account. Screenshots posted on Twitter appeared to confirm what the researchers said the hacker claimed: That they obtained privileged access to Uber's most critical systems through social engineering. The company said there was no evidence that the intruder accessed "sensitive user data" such as trip history. Sam Curry, an engineer with Yuga Labs who also communicated with the hacker, said there was no indication that the hacker had done any damage or was interested in anything more than publicity. Screenshots the hacker shared — many of which found their way online — showed they had accessed sensitive financial data and internal databases. Two researchers who communicated directly with the person — who self-identified as an 18-year-old to one of them— said they appeared interested in publicity.

Uber investigating 'cybersecurity incident' after report of breach (Reuters)

Uber Technologies Inc said it was investigating a cybersecurity incident after a report of a network breach that forced the company to shut several internal ...

Cybersecurity has been an issue for Uber in the past. Register now for FREE unlimited access to Reuters.com The worker was persuaded to hand over a password that allowed the hacker to gain access to Uber's systems, the report said. A person assumed responsibility for the hack and told the paper he had sent a text message to an Uber employee claiming to be a corporate IT person. "I announce I am a hacker and Uber has suffered a data breach," the message read, and went on to list several internal databases that were allegedly compromised, the report added. It appeared the hacker was able to gain access to other internal systems, posting an explicit photo on an internal information page for employees, the Times report added.

Uber cyber attack: protecting against social engineering ... (Information Age)

Uber has announced a "cyber security incident", which entailed an 18-year-old hacker infiltrating employees' Slack network.

[Considering digital trust: why zero trust needs a rethink](/considering-digital-trust-why-zero-trust-needs-rethink-123499500/) — David Mahdi, chief strategy officer and CISO advisor at Sectigo, discusses the important role of digital trust in the security strategy. [Slack](https://slack.com/) app, using it to send messages to [Uber](https://www.uber.com/) employees, stating: “I announce I am a hacker and Uber has suffered a data breach”, before listing the databases they had gained access to. “Callsign’s recent Digital Trust Index research has found with the ongoing shift to digital services, 50 per cent of consumers believe that a regulated digital identity system will become part of our daily lives within five years. [Matt Aldridge](https://www.linkedin.com/in/mattaldridge/), principal solutions consultant, BrightCloud at [OpenText Security Solutions](https://www.opentext.com/), identified two major factors in attacks like this occurring: “the exploitation of poorly trained users”; and “the carelessness to leave privileged credentials on a network share”. [Julia O’Toole](https://www.linkedin.com/in/juliaotoole/), CEO of [MyCena Security Solutions](https://mycena.co/). [Bleeping Computer has reached out](https://www.bleepingcomputer.com/news/security/uber-hacked-internal-systems-breached-and-vulnerability-reports-stolen/) to the person allegedly responsible, and in the process found screenshots showing access to “critical Uber IT systems”, including Uber’s Slack channel, AWS console, and Google Workspace email admin dashboard.

Uber investigates reported cybersecurity incident on Slack (Proactive Investors USA & Canada)

One person, who claimed to be the hacker, said he sent a text message to one of its workers insisting he was a corporate IT employee before...

The Uber worker handed over a password that gave the hacker access to the systems, according to the NY Times. "Uber is a valued customer and we are here to help them if they need us," Slack said in a statement. Uber said it took Slack - which is owned by Salesforce Inc - offline for its employees, after the message reading “I announce I am a hacker and Uber has suffered a data breach," before adding internal databases that had apparently been breached.

The Uber Hack's Devastation Is Just Starting to Reveal Itself (WIRED)

The attacker reportedly posted, “Hi @here I announce I am a hacker and Uber has suffered a data breach,” in a channel on Uber's Slack on Thursday night. The ...

[claims](https://twitter.com/GossiTheDog/status/1570717994397073410/photo/1) that they first gained access to company systems by targeting an individual employee and repeatedly sending them multifactor authentication login notifications. [popular with attackers](https://twitter.com/SElovitz/status/1497598379622293504). With control of this account, the attacker claimed, they were able to gain access tokens for Uber's cloud infrastructure, including Amazon Web Services, Google's GSuite, VMware's vSphere dashboard, the authentication manager Duo, and the critical identity and access management service OneLogin. In a [midday update](https://www.uber.com/newsroom/security-update/) on Friday, the company said that “internal software tools that we took down as a precaution yesterday are coming back online.” Invoking time-honored breach-notification language, Uber also said on Friday that it has “no evidence that the incident involved access to sensitive user data (like trip history).” Screenshots leaked by the attacker, though, indicate that Uber's systems may have been deeply and thoroughly compromised and that anything the attacker didn't access may have been the result of limited time rather than limited opportunity. The attacker [reportedly](https://twitter.com/vxunderground/status/1570626503947485188/photo/1) posted, “Hi @here I announce I am a hacker and Uber has suffered a data breach,” in a channel on Uber's Slack on Thursday night. [confirmed](https://twitter.com/Uber_Comms/status/1570584747071639552?s=20&t=5CditVk__kozJuSLwSReiA) that it was responding to “a cybersecurity incident” and was contacting law enforcement about the breach.