• Welcome to Valhalla Legends Archive.
 

Paris Hilton got hax0red!

Started by CrAz3D, February 20, 2005, 12:26 PM

Previous topic - Next topic

sray390


iago

Quote from: sray390 on February 22, 2005, 07:30 PM
here is a more detailed....well here


**EXCLUSIVE** This is an exclusive you will not see anywhere else. As many of you know,  Paris Hilton's T-Mobile address book was stolen and posted online. But what you don't know is, shortly thereafter a hacker gained access to both Paris' and Vin's private saved voicemail messages. I was contacted anonymously and shown proof of the hacker's ability to access these private saved voicemails.

The hack is a simple one that I duplicated easily. If you have Sprint or T-Mobile and have auto voicemail login enabled, you are vulnerable to this type of attack. I have auto voicemail login enabled because I hate entering my voicemail PIN number each time I want to check my messages.

The voicemail authentication system is simple. It uses caller ID to validate the originating number – if the caller ID matches your cell phone number (ie. your cell phone calling in to check your voicemail messages), it will log you in automatically.

This system has worked great for the last few years. Well, that is until the advent of commercial caller ID spoofing systems such as CovertCall and Telespoof. For those not in-the-know, caller ID spoofing allows you to change your caller ID number to anything you like. To hack myself, I simply logged into CovertCall and placed a spoofed call to my cell phone. The spoofed call was to my cell phone, from my cell phone, forwarded to a pay phone. Sprint (my provider) thought I was calling from my cell, and automatically logged me in (even though I was performing this from a pay phone down the street).

As you can see, the hacker used the same method to access Paris Hilton's and Vin Diesel's private voicemails.  CovertCall offers free call recording, so the hacker was also able to save the voicemails to disk (I wouldn't have believed it, had I not heard them myself).  From what they tell me, of the entire list only those two accounts used the auto login method.  NOTE: This article is for informational purposes only - accessing someone's voicemail without their consent is highly illegal.

That hack was known long before it was exploited, it was brought up on some public mailing list.  And apparently, T-Mobil is still vulnerable.
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Meh

I tried some but said the numbers were unavailable. Other people had same problems >:(

Psycho

Quote from: warz on February 21, 2005, 12:43 AM
This is all over the radio down here. I saw it here first and didn't think of it as such a big deal. I phoned Lindsay Lohan and I think hers works. I got some answering machine that said "this is lindsay.. [and this is some dude (in the background)].. leave a msg" or something. Im determined to speak with that vixen.

Maybe the guy in the background was Wilmur.

|