Uber breach

Uber’s 2022 Hack: A Bought Password, a Flood of Pushes, and vSphere

Post author:Hmmnm
Post published:September 15, 2022
Post category:Cloud & Infrastructure Identity & Phishing Security

An 18-year-old bought a contractor's Uber password, bombarded them with MFA pushes until one was approved, then roamed to vSphere via hardcoded credentials.