filmov
tv
NordVPN Hacked? What Really Happened
Показать описание
Information has recently surfaced about a NordVPN breach caused by vulnerabilities in a third-party datacenter’s server. We’d like to give you a clear timeline of the events followed by some key facts about the NordVPN breach story.
***
***
Key facts
One server was affected in March 2018 in Finland. The rest of our service was not affected. No other servers of any type were put at risk. This was an attack on our server, not our entire service.
The breach was made possible by poor configuration on a third-party datacenter’s part that we were never notified of. Evidence suggests that when the datacenter became aware of the intrusion, they deleted the accounts that had caused the vulnerabilities rather than notify us of their mistake. As soon as we learned of the breach, the server and our contract with the provider were terminated and we began an extensive audit of our service.
No user credentials were affected.
There are no signs that the intruder attempted to monitor user traffic in any way. Even if they had, they would not have had access to those users’ credentials.
The attacker did acquire TLS keys that, under extraordinary circumstances, could be used to attack a single user on the web using a specifically targeted and highly sophisticated MITM attack that we detail further below. These keys could not and cannot be used to decrypt any encrypted NordVPN traffic in any form.
Two other VPN providers were impacted in attacks published by the same intruder. We do not believe that this was a targeted attack against NordVPN.
The incident effectively showed that the affected server did not contain any user activity logs. To prevent any similar incidents, among other means, we encrypt the hard disk of each new server we build. The security of our customers is the highest priority to us and we will continue to raise our standards further and further.
Our goal here is to notify and educate the public about this breach. That’s the only way we’ll be able to recover from this significant setback and make our security even tighter.
***
***
Key facts
One server was affected in March 2018 in Finland. The rest of our service was not affected. No other servers of any type were put at risk. This was an attack on our server, not our entire service.
The breach was made possible by poor configuration on a third-party datacenter’s part that we were never notified of. Evidence suggests that when the datacenter became aware of the intrusion, they deleted the accounts that had caused the vulnerabilities rather than notify us of their mistake. As soon as we learned of the breach, the server and our contract with the provider were terminated and we began an extensive audit of our service.
No user credentials were affected.
There are no signs that the intruder attempted to monitor user traffic in any way. Even if they had, they would not have had access to those users’ credentials.
The attacker did acquire TLS keys that, under extraordinary circumstances, could be used to attack a single user on the web using a specifically targeted and highly sophisticated MITM attack that we detail further below. These keys could not and cannot be used to decrypt any encrypted NordVPN traffic in any form.
Two other VPN providers were impacted in attacks published by the same intruder. We do not believe that this was a targeted attack against NordVPN.
The incident effectively showed that the affected server did not contain any user activity logs. To prevent any similar incidents, among other means, we encrypt the hard disk of each new server we build. The security of our customers is the highest priority to us and we will continue to raise our standards further and further.
Our goal here is to notify and educate the public about this breach. That’s the only way we’ll be able to recover from this significant setback and make our security even tighter.
0:01:46
NordVPN Hacked? What Really Happened
0:12:25
NordVPN was hacked... here is what we are doing about it
0:03:43
How to tell if your Wi-Fi Network Has Been Hacked | NordVPN
0:03:29
7 signs your phone was hacked | NordVPN
0:10:06
NordVPN Hacked! How secure is VPN Really?
0:11:25
Why I no longer use a VPN (most of the time) and nor should you
0:03:30
How Hackers Can Attack You On Public Wi-Fi | NordVPN
0:00:12
Even if you’re using the BEST free VPN, you shouldn’t completely trust it with your private info....
0:07:29
The TRUTH About the NordVPN Hack | Your Privacy Is an Illusion
0:10:17
NordVPN Hacked / Breached and Private Key Compromised
0:03:49
SQL Injection Attacks: How your website gets HACKED | NordVPN
0:06:12
My Problem With the NordVPN Hack
0:00:46
3 ILLEGAL apps that are now BANNED ❌
0:30:43
NordVPN Was Hacked: What Happened?
0:00:30
Did NordVPN get hacked?
0:04:23
NordVPN Waited a Year to Disclose Hack?
0:14:04
Youtuber Accidentally Exposes the Scam He's Promoting
0:00:41
Reddit HACKED: The company sweats users’ data is safe #Shorts
0:02:49
Hacker Demonstrates Security Risks Of Free Public Wi-Fi
0:05:51
Are VPNs Just A Scam?
0:07:10
Does NordVPN Protect You From Hackers? I NordVPN YouTube Q&A
0:01:12
How to prevent your phone from being hacked | NordVPN
0:04:39
Data leak: here’s what you do | NordVPN
0:07:41
NordVPN Hacked
Комментарии