"TeleMessage Signal (TM SGNL) Security Breach Exposes Vulnerabilities: A Case Study"

Read "TeleMessage Signal (TM SGNL) Security Breach Exposes Vulnerabilities: A Case Study" on RadioNOVO

"TeleMessage Signal (TM SGNL) Security Breach Exposes Vulnerabilities: A Case Study"

[!CDATA[A recent report revealed that a knock-off version of the Signal app, known as TeleMessage Signal or TM SGNL, was easily hacked within 15 to 20 minutes due to security vulnerabilities. Former National Security Adviser Mike Waltz was caught using this app, which lacks the security guarantees of the original Signal app. The hacker who infiltrated the app found that TeleMessage had weak password systems and other issues that made it susceptible to hacking. The app stored copies of all messages, unlike Signal, making it a target for hackers. The hacker discovered that TeleMessage was hashing passwords using MD5 on the client side, which compromised the security of the passwords. Additionally, the app was built using JSP, an outdated program, indicating poor security measures. By using Feroxbuster to locate a vulnerable URL, the hacker gained access to usernames and passwords of random accounts. They were able to hack into an account associated with US Customs and Border Protection and access plaintext chat logs, including internal conversations from Coinbase. The hacker's breach of TeleMessage allowed them to compromise CBP and Coinbase within a short period of time. The app uploaded unencrypted messages to archive.telemessage.com before forwarding them to the intended recipient, contradicting TeleMessage's claims of end-to-end encryption. If someone had accessed the heap dump URL while Waltz was using the app, they could have gained access to his encrypted Signal messages as well. The incident involving Mike Waltz using the compromised app in a group chat with top Trump officials discussing military strikes on Yemen led to his removal as National Security Adviser. The leak of this conversation to The Atlantic caused a scandal for the Trump administration. Secretary of State Marco Rubio is currently serving as Trump's acting National Security Adviser until an official replacement is named.]]