OneLogin Password Manager was hacked

03 June 2017, 19:37 | Technologies
photo InternetUA
Text Size:

Many users do not pay due attention to security when working on the Internet, choose light passwords, use the same passwords on different sites and services, often forget them. For this reason, it is recommended to use special programs to store all passwords in one place. Naturally, such solutions should be as reliable as possible, otherwise hackers will gain access to not just one user account, but to all at once.

In March, a problem was reported in the extension for browsers LastPass, now from a major hacking suffered the service OneLogin. On Tuesday, the blog information appeared, according to which unauthorized access to data in the US was recorded. After that, access was blocked, how many users were affected, not reported.

Later it was told that the hacker was able to get to a number of Amazon Web Services keys and used them to access the AWS API through an intermediate host.

The developers claim that they encrypt certain data, but it is possible that hackers are able to decipher them.

The OneLogin website says that the application is used by more than 2,000 corporate customers, including ARM and Pinterest. Also, there is integration with applications and services of Amazon Web Services, Office 365, LinkedIn, Slack, Twitter and Google. Users are encouraged to reset passwords, create new API keys and security certificates for their services, and create new OAuth tags.




Add a comment
:D :lol: :-) ;-) 8) :-| :-* :oops: :sad: :cry: :o :-? :-x :eek: :zzz :P :roll: :sigh:
 Enter the correct answer