The Syrian Electronic Army, the pro-President Bashar al-Assad hacking crew, has claimed responsibility for an attack on popular London-based messaging firm Viber.
The Viber support page was hacked and that site remains down today. User data, including the IP address, country and device type of the Viber member, has been compromised.
According to various reports, the Viber support page was replaced by a message from the Syrian Electronic Army, claiming Viber was “spying” on its users – something the firm has wholly refuted.
Viber said it was working to ensure something similar would not happen again, but insisted sensitive user data was not taken.
“Yesterday, the Viber Support site was defaced after a Viber employee unfortunately fell victim to an email phishing attack,” a spokesperson said.
“The phishing attack allowed access to two minor systems: a customer support panel and a support administration system. Information from one of these systems was posted on the defaced page.
“It is very important to emphasize that no sensitive user data was exposed and that Viber’s databases were not ‘hacked’. Sensitive, private user information is kept in a secure system that cannot be accessed through this type of attack and is not part of our support system.”
Viber’s Israeli connection – it has a number of development centres in the country – may be a chief reason behind the attacks on Viber. Israel has taken action to prevent weapons coming across the border and into the hands of Hezbollah, the Islamic organisation in Lebanon. Hezbollah has ties to the Syrian regime and has been fighting against rebel forces in the civil war.
This is the second time in a week the Syrian Electronic Army has hit a messaging app. The group claimed to have stolen 1.5 terabytes personal data of Tango users. The US company said over Twitter: “”Tango experienced a cyber intrusion that resulted in unauthorized access to some data. We are working on increasing our security systems.”
The Syrian Electronic Army has been busy this year, hitting various media bodies with spear phishing campaigns, including the Guardian and the Financial Times.
What do you know about Internet security? Find out with our quiz!
Suspended prison sentence for Craig Wright for “flagrant breach” of court order, after his false…
Cash-strapped south American country agrees to sell or discontinue its national Bitcoin wallet after signing…
Google's change will allow advertisers to track customers' digital “fingerprints”, but UK data protection watchdog…
Welcome to Silicon In Focus Podcast: Tech in 2025! Join Steven Webb, UK Chief Technology…
European Commission publishes preliminary instructions to Apple on how to open up iOS to rivals,…
San Francisco jury finds Nima Momeni guilty of second-degree murder of Cash App founder Bob…
View Comments
Hi,
I'm an official representative from Viber.
As explained in the article, no sensitive user data was exposed and Viber's databases were not "hacked". Sensitive, private user information is kept in a secure system that cannot be accessed through this type of attack and is not part of our support system.
We are reviewing all of our policies to make sure that no such incident is repeated in the future.
Note to our users: there is no need to uninstall and reinstall Viber, as no security threat is posed.
If you have any more questions/doubts, please feel free to let us know :)
Thanks,
The Viber Team.