Using a whatsapp vulnerability for profiling individuals
| dc.contributor.author | Kurowski, Sebastian | |
| dc.contributor.editor | Hühnlein, Detlef | |
| dc.contributor.editor | Roßnagel, Heiko | |
| dc.date.accessioned | 2017-06-30T21:00:29Z | |
| dc.date.available | 2017-06-30T21:00:29Z | |
| dc.date.issued | 2014 | |
| dc.description.abstract | This paper aims at raising awareness on the issue of using unfixed vulnerabilities for targeted attacks in order to harness private or even corporate information. We demonstrate an attack by using a well-known, yet not fixed whatsapp vulnerability, enabling us to eavesdrop the cell-phone number of a victim. We identified the concrete states, in which whatsapp leaks the cell-phone number of a victim. By using a volunteering individual, we demonstrate the feasibility of profiling the individual and provide further steps on how to disclose private and corporate information by using the leaked cell-phone number and the profiled information to introduce the adversary into a trust relationship with the victim. Once the victim trusts the adversary, social phishing can be used to retrieve further private or even corporate information. | en |
| dc.identifier.isbn | 978-3-88579-631-2 | |
| dc.identifier.pissn | 1617-5468 | |
| dc.language.iso | en | |
| dc.publisher | Gesellschaft für Informatik e.V. | |
| dc.relation.ispartof | Open Identity Summit 2014 | |
| dc.relation.ispartofseries | Lecture Notes in Informatics (LNI) - Proceedings, Volume P-237 | |
| dc.title | Using a whatsapp vulnerability for profiling individuals | en |
| dc.type | Text/Conference Paper | |
| gi.citation.endPage | 146 | |
| gi.citation.publisherPlace | Bonn | |
| gi.citation.startPage | 140 | |
| gi.conference.date | 4.-6. November 2014 | |
| gi.conference.location | Stuttgart |
Dateien
Originalbündel
1 - 1 von 1
Vorschaubild nicht verfügbar
- Name:
- 140.pdf
- Größe:
- 579.74 KB
- Format:
- Adobe Portable Document Format