Ghost, Encrypted Phone for Criminals, Was an ‘Absolute Mess’
Full article205 words · extracted from 404media.co · click to collapse
Law enforcement recently hacked into Ghost, an encrypted communications platform authorities allege was used by serious organized criminals, and gained access to user messages. Now independently of that, a security researcher has found multiple glaring issues with Ghost’s infrastructure, including ones that allowed him to pull a large list of Ghost usernames and customer support messages from a publicly exposed Ghost server, according to a copy of the researcher’s findings and multiple screenshots shared with 404 Media.
The news shows how as organized criminals move to making their own, smaller encrypted phone networks, those systems could be vulnerable to outside hackers or law enforcement.
When Ghost started to rely “on their own code, not that of an enterprise company, that’s when you see what an absolute mess it was,” Jamieson O’Reilly, founder and offensive security lead of cybersecurity company Dvuln, told 404 Media in an online chat.
This post is for paid members only
Become a paid member for unlimited ad-free access to articles, bonus podcast content, and more.
Sign up for free access to this post
Free members get access to posts like this one along with an email round-up of our week's stories.
Already have an account? Sign in
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.404media.co/ghost-encrypted-phone-for-criminals-was-an-absolute-mess-2/