On line dating solution OkCupid has come under scrutiny after Check Point Research discovered a few safety flaws in both the companyвЂ™s site and software.
Always check aim revealed that the weaknesses, if exploited, might have permitted a hacker to access and take the personal information of OkCupid users, along with potentially send messages from users accounts that are the consumer once you understand or consenting.
Also, effective breaches into OkCupid reports could give attackers usage of usersвЂ™ profile details, including personal information that is personal personal communications, intimate orientation, individual target, and all sorts of presented responses towards the concerns asked by OkCupidвЂ™s profiling test.
Applying this information, hackers could impersonate other users maliciously, or otherwise manipulate the targetвЂ™s information for nefarious ends.
Scientists from Check aim detailed the three-step attack method which may have enabled a hacker to focus on users:
- The hacker produces a harmful website link containing a targeted payload that initiates the assault
- The hacker delivers the hyperlink towards the intended target, or posts it in a general general general general public forum for users to click
- When the target clicks the web link to start it, the harmful rule is performed, offering the hacker use of the targetвЂ™s account.