- Joined
- May 15, 2016
- Messages
- 3,878
- Likes
- 2,573
- Points
- 1,730
Using the detected data, you can find out information about connected devices in the user's home.
ElasticSearch databases, presumably managed by the Advanced Wireless Network (AWN) division of Thailand's largest mobile operator Advanced Info Service (AIS), with about 8 billion Internet records from millions of Thai users, were on the Web.
Security researcher Justin Paine discoveredPassword-protected databases containing DNS queries and Netflow network protocol data on the Web. According to Payne, anyone can quickly gather the necessary information about user actions in real time. Using the detected data, anyone could find out information about connected devices in the home of an Internet user, installed anti-virus software, browsers used and social networks visited.
Payne warned AIS about a data leak on May 13th. The company did not respond to the notification for a week, and Payne reported the incident to the Thai National Emergency Response Team (ThaiCERT). Soon the databases were down.
NetFlow is a network protocol developed by Cisco Systems to collect information about IP traffic and monitor network traffic. By analyzing data about flows, you can get an idea of the flow and amount of network traffic.
__________________
ElasticSearch databases, presumably managed by the Advanced Wireless Network (AWN) division of Thailand's largest mobile operator Advanced Info Service (AIS), with about 8 billion Internet records from millions of Thai users, were on the Web.
Security researcher Justin Paine discoveredPassword-protected databases containing DNS queries and Netflow network protocol data on the Web. According to Payne, anyone can quickly gather the necessary information about user actions in real time. Using the detected data, anyone could find out information about connected devices in the home of an Internet user, installed anti-virus software, browsers used and social networks visited.
Payne warned AIS about a data leak on May 13th. The company did not respond to the notification for a week, and Payne reported the incident to the Thai National Emergency Response Team (ThaiCERT). Soon the databases were down.
NetFlow is a network protocol developed by Cisco Systems to collect information about IP traffic and monitor network traffic. By analyzing data about flows, you can get an idea of the flow and amount of network traffic.
__________________