Taking over Uber accounts through voicemail

Taking over Uber accounts through voicemail(blog.assetnote.io)

15 points by infosecau 4 years ago | 5 comments

dns 4 years ago |

I know as shubs, this post interesting and good writeup. thanks! I follow you on twitter!

mechboy 4 years ago |

Uber will never know the severity of this bug until several user accounts got compromised by someone

zealsham 4 years ago |

I’ll say Uber rejected this due to highly unlikely user interaction required .

infosecau 4 years ago | |

There's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.

fzionism 4 years ago |

Very interesting,