News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Hackers steal secret crypto keys for NordVPN

    Posted on CADesertRat Comment on the AskWoody Lounge

    Home Forums Code Red – Security/Privacy advisories Hackers steal secret crypto keys for NordVPN

    This topic contains 1 reply, has 2 voices, and was last updated by  AJNorth 4 weeks ago.

    • Author
      Posts
    • #1987060 Reply

      CADesertRat
      AskWoody Plus

      Evidently this happened some time ago but NordVPN is just now fessing up to it.

      https://arstechnica.com/information-technology/2019/10/hackers-steal-secret-crypto-keys-for-nordvpn-heres-what-we-know-so-far/

       

      Hackers breached a server used by popular virtual network provider NordVPN and stole encryption keys that could be used to mount decryption attacks on segments of its customer base.

      A log of the commands used in the attack suggests that the hackers had root access, meaning they had almost unfettered control over the server and could read or modify just about any data stored on it. One of three private keys leaked was used to secure a digital certificate that provided HTTPS encryption for nordvpn.com. The key wasn’t set to expire until October 2018, some seven months after the March 2018 breach. Attackers could have used the compromised certificate to impersonate the nordvpn.com website or mount man-in-the-middle attacks on people visiting the real one. Details of the breach have been circulating online since at least May 2018.

      Don't take yourself so seriously, no one else does 🙂
      4 Win 10 Pro currently 1809 (3 Desktops, 1 Laptop).

      1 user thanked author for this post.
    • #1987152 Reply

      AJNorth
      AskWoody Plus

      Here is another article on NordVPN from Tom’s Guide, which also includes issues involving TorGuard:

      NordVPN, TorGuard Admit Being Hacked, But That’s Just the Beginning

      https://www.tomsguide.com/news/nordvpn-torguard-admit-being-hacked-but-thats-just-the-beginning

       

      And one which Brian Krebs just posted:

      Avast, NordVPN Breaches Tied to Phantom User Accounts

      https://krebsonsecurity.com/2019/10/avast-nordvpn-breaches-tied-to-phantom-user-accounts/

       

      1 user thanked author for this post.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Hackers steal secret crypto keys for NordVPN

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.