Free Chinese VPN exposed data from over a million users

Cybersecurity researchers have discovered unencrypted data of about a million users of Quickfox, a free virtual private network (VPN) service primarily used to access Chinese sites from outside of mainland China.

Commenting on the find, WizCase says that the data exposed a variety of personally identifiable information (PII) of the users of the service, including their names, phone numbers, and more.

“There was no need for a password or login credentials to see this information, and the data was not encrypted. Based on the records exposed, our team estimates that the breach affected at least a million Quickfox users,” writes WizCase.

Overzealous collection

The data was discovered through a misconfiguration in Quickfox’s ElasticSearch server thanks to incomplete ELK stack security.

The researchers explain that ELK (Elasticsearch, Logstash, and Kibana) are three open source applications that help streamline searches through large files, such as the logs of an online service like Quickfox.

“Quickfox had set up access restrictions from Kibana, but had not set up the same security measures for their Elasticsearch server. This means that anyone with a browser and an internet connection could access Quickfox logs and extract sensitive information on Quickfox users,” explained WizCase.

The total leaked data was made up of over 500 million records and totaled over 100GB. About a million of these records had PII of users, including MD5 hashed passwords, which WizCase claims can’t withstand modern password crackers.

Worryingly however, the leaked data didn’t just contain the IP address assigned to the user, but also the user’s original IP address from which they connected to the VPN service. WizCase was also surprised that the service collects data about the other software installed on the user’s device.

“It’s unclear why the VPN was collecting this data, as it is unnecessary for its process and it is not standard practice seen with other VPN services. We could not find Quickfox’s terms of use or privacy policy to confirm whether or not users were aware of the information that Quickfox is extracting,” WizCase observes

source: https://www.techradar.com/news/free-chinese-vpn-exposed-data-from-a-million-users

#ailareaillaa, #sooryavanshi, #radwimps, #k_round, #joby, #yuju, #kaththi, #spicy, #worldisone2021, #alpha, #worldisone, #qt, #tatakpinoy, #ntr, #mainaandkingangi

RSS Latest Press Release

  • Confort Prestige | Climatisation & Chauffage Announces HVAC Services For Improved Energy Efficiency
    TERREBONNE, QUEBEC- NOVEMBER 14, 2021- Premier heating and cooling company Confort Prestige is excited to share HVAC solutions with domestic customers in the Terrebonne area. These services aim to save customers money on their heating and cooling expenses throughout the year.   Since its debut, Confort Prestige has been committed to customer service. This starts […]
  • Hundreds of Car and Truck Parts Available from Salvage Specialist
    Morganville, NJ – When it comes to finding an auto part for a foreign or domestic vehicle, Trilenium Auto Salvage usually has the answer.   The Morganville, NJ salvage specialist has hundreds, if not thousands, of parts and components at its Tennent Rd premises available.   Trilenium Auto Salvage is one of the busiest salvage specialists […]
  • Flowsent Weed Delivery Offers the Fastest Weed Delivery Service in the Bay Area
    Bay Area, CA - As it becomes easier to get cannabis in different stores and online, weed delivery in Oakland, San Francisco, and other Bay Area cities are becoming more common. People are looking for the easiest way to get their hands on high-quality, safe cannabis, and nothing beats direct to your door.    Many […]
  • Cannamazoo Now Offering the Top Cannabis Concentrates in Michigan
    What are Cannabis Concentrates, Oils, and Extracts?   Kalamazoo, MI - You may be familiar with recreational cannabis in its usual form, but have you ever tried extracts, oils, and concentrates? Each of these forms offers unique effects and benefits that smoking cannabis flowers can't provide. Simple dosing, cleaner effects, and better taste are just […]