Subj : This top online video downloader is exposing user data  and trust
To   : All
From : TechnologyDaily
Date : Tue May 28 2024 19:45:05

This top online video downloader is exposing user data  and trust us, you 
don't want some of this data exposed

Date:
Tue, 28 May 2024 18:40:20 +0000

Description:
A video downloader found inadvertently exposing people who downloaded porn 
and other videos.

FULL STORY
======================================================================

Cloud-based video downloader service Dirpy has been found leaking sensitive 
data on its users, placing them at risk of all sorts of cyberattacks. 

Cybersecurity researchers from Cybernews revealed how they found an open 
Kibana instance with 15.7 million entries of private data in late March 2024. 
The data included peoples IP addresses, account IDs of those with Premium 
User accounts, activity logs, including which videos the users downloaded, 
URLs of the requested content, and user diagnostic information. 

We dont know exactly how many people are affected by the leak, but we do know 
that the majority of Dirpys users are based in the US and Japan. Extorting 
the victims 

 Cybernews determined that the Kibana instance belonged to Dirpy, an online 
tool that allows users to convert and download online videos, particularly 
from YouTube. The videos can be converted into different formats, including 
..MP3 (audio), and .MP4 (video). The researchers notified Dirpy of their 
findings who, soon after, closed the database for the public. The private 
data was available for more than a month, between March 18 and April 24 2024. 

We dont know if any malicious third parties found and downloaded the database 
before Cybernews  team did. 

While downloading video content from these platforms without explicit consent 
from the authors is illegal, Cybernews stresses, grabbing it for personal, 
non-commercial use, is legal. 

That being said, there are ways hackers could have used the database. Asides 
from the usual phishing, identity theft , or social engineering attacks, the 
attackers could, in theory, discover the identity of the people who 
downloaded adult, pornographic, or otherwise compromising content. 

This information could then be used in extortion attacks, blackmailing people 
into giving away cryptocurrency in exchange for keeping the information 
private, as poorly protected databases are one of the most common causes of 
data leaks. More from TechRadar Pro Hackers steal massive screening database 
and threaten to leak all the details online Here's a list of the best 
firewalls today These are the best endpoint protection tools right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/this-top-online-video-downloader-is-exp
osing-user-data-and-trust-us-you-dont-want-some-of-this-data-exposed


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.