Connect with us

World News

Bugs in transportation app Moovit gave hackers free rides on August 13, 2023 at 8:30 pm

Published

on

Hackers could have hijacked the user accounts of a popular transportation app and used them to get free rides and access people’s personal information, according to a security researcher.

Omer Attias, a security researcher at SafeBreach, said he found three vulnerabilities in the Moovit app, which allowed him to collect new Moovit user’s registration information from all over the world — including cell phone numbers, email addresses, home addresses, and the last four digits of credit cards. Worst of all, the bugs could have allowed him to take over other people’s accounts, and consequently their credit cards, to pay for his own rides.

This whole chain of exploits could have been performed without the target ever finding out, apart from seeing unwanted charges on their credit card. Attias called it “the perfect attack.”

“We can fully impersonate accounts, without disconnecting them. It’s crazy, we actually have the ability to perform all the operations on behalf of different accounts, including ordering train tickets,” Attias told TechCrunch in an interview ahead of his talk at the Def Con hacking conference in Las Vegas. “And additionally, we can access all of their personal information.”

Advertisement

To demonstrate the impact of the bugs he found, Attias created a custom interface that allowed him to take over other people’s accounts with a couple of taps. And while Attias said he tested his exploits only in Israel, he said he thinks it could have worked in other cities given that Moovit operates all over the world.

Moovit is an Israeli startup that was acquired by Intel in 2020 for $900 million. The app allows users to find routes and view public transportation systems’ maps, as well as to purchase and use tickets. The app and its underlying technology are widely used worldwide: Moovit claims to serve 1.7 billion riders in 3,500 cities across 112 countries.

While the impact of these vulnerabilities was potentially massive, Moovit said there is no evidence that malicious hackers found and exploited these bugs. Attias said that he reported all the bugs he found to the company in September 2022, and the company subsequently fixed them.

“Moovit was aware of and rectifying the issue when it was reported, and took immediate steps to finish correcting the issue,” Moovit spokesperson Sharon Kaslassi told TechCrunch. “The vulnerabilities have long since been fixed and no customer action is required. It’s important to note that no bad actors took advantage of these issues to access customer data. Additionally, no credit card information was exposed as Moovit and Moovit-Pango do not keep credit card information on file.”

Advertisement

Kaslassi also said that “ticketing service relevant to these findings is active in Israel only.”

“According to our records, neither Safebreach or anyone else took advantage of any customer data in or outside of Israel,” the spokesperson added.

In response to Moovit’s comments, Attias said that he and his colleagues “believe we could have charged any customer not limited to Israeli customers. We haven’t seen any differentiator between Israeli and non Israeli customers in their API requests.”

Read more from Black Hat:

Advertisement

How the FBI goes after DDoS cyberattackers
Researchers watched 100 hours of hackers hacking honeypot computers
Researchers jailbreak a Tesla to get free in-car feature upgrades

​ Hackers could have hijacked the user accounts of a popular transportation app and used them to get free rides and access people’s personal information, according to a security researcher. Omer Attias, a security researcher at SafeBreach, said he found three vulnerabilities in the Moovit app, which allowed him to collect new Moovit user’s registration information 

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

US May Completely Cut Income Tax Due to Tariff Revenue

Published

on

President Donald Trump says the United States might one day get rid of federal income tax because of money the government collects from tariffs on imported goods. Tariffs are extra taxes the U.S. puts on products that come from other countries.

What Trump Is Saying

Trump has said that tariff money could become so large that it might allow the government to cut income taxes “almost completely.” He has also talked about possibly phasing out income tax over the next few years if tariff money keeps going up.

How Taxes Work Now

Right now, the federal government gets much more money from income taxes than from tariffs. Income taxes bring in trillions of dollars each year, while tariffs bring in only a small part of that total. Because of this gap, experts say tariffs would need to grow by many times to replace income tax money.

Questions From Experts

Many economists and tax experts doubt that tariffs alone could pay for the whole federal budget. They warn that very high tariffs could make many imported goods more expensive for shoppers in the United States. This could hit lower- and middle‑income families hardest, because they spend a big share of their money on everyday items.

What Congress Must Do

The president can change some tariffs, but only Congress can change or end the federal income tax. That means any real plan to remove income tax would need new laws passed by both the House of Representatives and the Senate. So far, there is no detailed law or full budget plan on this idea.

What It Means Right Now

For now, Trump’s comments are a proposal, not a change in the law. People and businesses still have to pay federal income tax under the current rules. The debate over using tariffs instead of income taxes is likely to continue among lawmakers, experts, and voters.

Advertisement
Continue Reading

News

Epstein Files to Be Declassified After Trump Order

Published

on


Former President Donald Trump has signed an executive order directing federal agencies to declassify all government files related to Jeffrey Epstein, the disgraced financier whose death in 2019 continues to fuel controversy and speculation.

The order, signed Wednesday at Trump’s Mar-a-Lago estate, instructs the FBI, Department of Justice, and intelligence agencies to release documents detailing Epstein’s network, finances, and alleged connections to high-profile figures. Trump described the move as “a step toward transparency and public trust,” promising that no names would be shielded from scrutiny.

“This information belongs to the American people,” Trump said in a televised statement. “For too long, powerful interests have tried to bury the truth. That ends now.”

U.S. intelligence officials confirmed that preparations for the release are already underway. According to sources familiar with the process, the first batch of documents is expected to be made public within the next 30 days, with additional releases scheduled over several months.

Reactions poured in across the political spectrum. Supporters praised the decision as a bold act of accountability, while critics alleged it was politically motivated, timed to draw attention during a volatile election season. Civil rights advocates, meanwhile, emphasized caution, warning that some records could expose private victims or ongoing legal matters.

The Epstein case, which implicated figures in politics, business, and entertainment, remains one of the most talked-about scandals of the past decade. Epstein’s connections to influential individuals—including politicians, royals, and executives—have long sparked speculation about the extent of his operations and who may have been involved.

Advertisement

Former federal prosecutor Lauren Fields said the release could mark a turning point in public discourse surrounding government transparency. “Regardless of political stance, this declassification has the potential to reshape how Americans view power and accountability,” Fields noted.

Officials say redactions may still occur to protect sensitive intelligence or personal information, but the intent is a near-complete disclosure. For years, critics of the government’s handling of Epstein’s case have accused agencies of concealing evidence or shielding elites from exposure. Trump’s order promises to change that narrative.

As anticipation builds, journalists, legal analysts, and online commentators are preparing for what could be one of the most consequential information releases in recent history.

Continue Reading

Politics

Netanyahu’s UN Speech Triggers Diplomatic Walkouts and Mass Protests

Published

on

What Happened at the United Nations

On Friday, Israeli Prime Minister Benjamin Netanyahu addressed the United Nations General Assembly in New York City, defending Israel’s ongoing military operations in Gaza. As he spoke, more than 100 delegates from over 50 countries stood up and left the chamber—a rare and significant diplomatic walkout. Outside the UN, thousands of protesters gathered to voice opposition to Netanyahu’s policies and call for accountability, including some who labeled him a war criminal. The protest included activists from Palestinian and Jewish groups, along with international allies.

Why Did Delegates and Protesters Walk Out?

The walkouts and protests were a response to Israel’s continued offensive in Gaza, which has resulted in widespread destruction and a significant humanitarian crisis. Many countries and individuals have accused Israel of excessive use of force, and some international prosecutors have suggested Netanyahu should face investigation by the International Criminal Court for war crimes, including claims that starvation was used as a weapon against civilians. At the same time, a record number of nations—over 150—recently recognized the State of Palestine, leaving the United States as the only permanent UN Security Council member not to join them.

International Reaction and Significance

The diplomatic walkouts and street protests demonstrate increasing global concern over the situation in Gaza and growing support for Palestinian statehood. Several world leaders, including Colombia’s President Gustavo Petro, showed visible solidarity with protesters. Petro called for international intervention and, controversially, for US troops not to follow orders he viewed as supporting ongoing conflict. The US later revoked Petro’s visa over his role in the protests, which he argued was evidence of a declining respect for international law.

BILATERAL MEETING WITH THE PRIME MINISTER OF ISRAEL Photo credit: Matty STERN/U.S. Embassy Jerusalem

Why Is This News Important?

The Gaza conflict is one of the world’s most contentious and closely-watched issues. It has drawn strong feelings and differing opinions from governments, activists, and ordinary people worldwide. The United Nations, as an international organization focused on peace and human rights, is a key arena for these debates. The events surrounding Netanyahu’s speech show that many nations and voices are urging new action—from recognition of Palestinian rights to calls for sanctions against Israel—while discussion and disagreement over the best path forward continue.

This episode at the UN highlights how international diplomacy, public protests, and official policy are all intersecting in real time as the search for solutions to the Israeli-Palestinian conflict remains urgent and unresolved.

Continue Reading

Trending