Hacker broke into most famous email service using Encryption
A group of hackers claimed that they hacked into email service ProtonMail and stole “significant” amounts of data. They have not yet released data about hacking, but put forward their demands to the company to repurchase the stolen information.
It is unknown whether the hacker alone or in a team of cyber criminals, however, in their statement said that they managed to steal “significant” amounts of company data which passed through the postal service. The user, who published the text with this information, also accused ProtonMail to send the decrypted user data on American servers.
“We offer to return the data ProtonMail for a small fee. If they refuse, we will publish or sell the data of users around the world”, — noted in the text.
Also in the text there are several claims to the security service. “Open source ProtonMail can be freely checked on Github, and everyone can see that they have not set a mandatory function of SRI; this allows you to rig and collect user data at any time”. The hacker added that the data collection in this case will be invisible to the server, because without the inclusion of SRI, all users should check the site code during the execution of the task.
They also accused that ProtonMail sends the decrypted user data on American servers. The hackers suggested that it may be associated with the Swiss Treaty on mutual legal assistance MLAT. “It was surprising to note, while not directly concerns the fact of hacking,” reads the text.
Hacking ProtonMail denies and says that they have no evidence that hackers have access to information about users. While in the service confirmed that they know about a limited number of compromised accounts that were compromised after you enter the credentials from phishing attacks. In the service believe that it is not a systemic problem.
“The criminals trying to extort money from ProtonMail, claiming that we are violating the confidentiality of the data, but they have no evidence. An internal investigation revealed two messages from criminals who again repeated the accusations, but we have no signs of violations,” added the company. They promised to seriously consider them if they have reliable information about the burglary.
source sivweek
Industry: Cyber Security News
Latest Jobs
-
- Infrastructure (Network / Security) Engineer | West London commutable | Permanent
- London
- Apply today
-
Infrastructure (Network / Security) Engineer | West London commutable | Permanent This is an in house opportunity. Looking for someone that has on prem / data center experience MUST be a currently hands on config, Install, upgrade, troubleshooting experience Routing, Switching, Network Security (firewall, IDS etc), Microsoft Active Directory / 365. VMWare Scripting / automation experience wanted. Python, Powershell etc Must be commutable to West London twice a week. Visa sponsorship not available. Apply today for more information Book a call via this link https://calendly.com/d/crqf-t28-7tb
-
- Identity & Access Management Architect
- Edinburgh
- Upto £95000 plus bonus and benefits
-
Location: Edinburgh | Hybrid Working | Permanent Are you an experienced Identity & Access Management professional with a passion for designing and implementing cutting-edge security solutions? We are looking for a Lead Architect, where you’ll play a key role in helping clients enhance their IAM capabilities, protect critical data, and navigate complex security challenges. About the Role As a Lead Architect, you will be responsible for shaping and delivering IAM strategies, designing robust security solutions, and driving long-term digital transformation. You’ll leverage your expertise to provide strategic guidance on areas such as: Identity Governance & Administration (IGA) Privileged Access Management (PAM) Access Management (AM) Entitlement Management Directories & Authentication Solutions You will have the opportunity to work with innovative technologies and frameworks, ensuring that businesses can securely manage access to critical assets while enabling growth. What You’ll Be Doing Providing subject matter expertise in IAM and leading transformation projects for clients Developing IAM roadmaps, operating models, and governance frameworks Driving innovation by integrating IAM capabilities into wider digital transformation strategies Building and maintaining strong relationships with clients and stakeholders Designing and implementing scalable IAM solutions to meet business needs What We’re Looking For Proven experience in IAM strategy, solution architecture, or assurance Strong leadership skills with experience guiding technical teams Ability to work in a client-facing role, delivering clear communication and insights A technology-focused, innovative mindset with strong business acumen Willingness to work from our Edinburgh office 2-3 days per week
-
- Security Architect - Cloud - Consultancy London
- London
- N/A
-
Security Architect with a focus into Cloud (AWS, Azure or Google Cloud Platform) needed. You must have client facing consultancy experience. This mean you must have experience working with clients helping them to meet their security design needs. That could include working with existing internal teams to understand, review and mitigate / uplift existing Cloud Security designs, or perhaps helping clients set out / understand their current needs and deliver their cloud security strategy. (Or anything in between) Technical knowledge is of course essential but working with clients to understand and solve their Cloud Security design challenges is vital. You must obviously have a current history working as a cloud security architect. You will need to be commutable to London. Whilst a hybrid role the expectation is 3 days a week in the office / meeting clients. International relocation or Visa sponsorship isn’t available for this role. Apply on this page and arrange a call here https://calendly.com/d/crpz-m7j-wyx