Skip to main content

Major Security Flaw — Airtel’s Mobile App Exposes Personal Data of 32 Crore Subscribers


Indian security researcher, Ehraz Ahmed discovered a critical security flaw in the Airtel mobile app that could expose the personal data of 32 crore subscribers. The flaw exists in their mobile app's API that allows an attacker to retrieve private sensitive information of any Airtel subscribers.

Airtel is the 3rd largest telecom service provider in India in terms of subscribers after Vodafone-Idea (VI) and Reliance Jio. 

The critical security flaw could allow a hacker to retrieve private sensitive information of any Airtel subscribers and by having the sensitive details hacker can set up targeted attacks. 

The private sensitive information that can be exposed includes First Name, Last Name, Birthdate, Email, Gender, Redidential Address, Subscription Data, Network Info, Device Capability info (2G/3G/4G), User Type (Postpaid/Prepaid), and IMEI Number. 

The IMEI number is always a unique one and due to this, it can be used to recognize (identify) the device of the user. So, this security flaw creates a risk to all Airtel users, a likely chance of getting their private sensitive information exposed

Security researcher, Ehraz Ahmed also demonstrates how the script (made by him) requests the API and retrieves the user's private sensitive information.


The company confirmed the flaw and also patched the flaw present in its mobile app's API immediately.

According to Airtel, the company's digital platforms are very secure and their customer's security and privacy are most important to them. Also, they use the best security solutions to protect the security and privacy of their digital platforms. 

Ehraz Ahmed had found a critical security flaw in a popular caller-identification app Truecaller in last month. This flaw could have exposed sensitive user data as well as device and location information to attackers. If you want to learn more about Truecaller flaw then Click here.

If you have any questions related to the critical Airtel mobile app's flaw and also want to share your views on this flaw then please mention in the comments box and I will get back to you.

Comments

Popular posts from this blog

How To Check If a Link Is Safe To Click

Many times, we share links among our friends on social media platforms like WhatsApp, Facebook, Instagram or Twitter. But do we know how safe they are? What can happen if you click on any malicious link? We never think of the following things : Links can drop various harmful programs, viruses on your device Links can steal your personal data by dropping spyware or keyloggers Use your browser for crypto mining which will affect your device's performance Even if your device is secured with antivirus, not all of them warn you before clicking such malicious links . And the moment you click on these, they will become big trouble for you. This can sometimes even be dangerous with regard to data security and identity theft. So, Be careful about what you click on. These days one of the quickest growing security issues is ransomware , which is often spread by the user unintentionally clicking dangerous links in emails, social media platforms, messengers, and other tool

TikTok Secretly Sent Users Private Data & PII Number to Chinese Server Including Draft Videos

The popular Android and iOS short-videos creating app, TikTok hit with a lawsuit claims that the app illegally and secretly transfers app's users' private sensitive data and Personally Identifiable Information (PII) to Chinese servers. TikTok which is a 15-second short-video creating app especially popular among the younger generation and also downloaded over 1.3 Billion times worldwide . TikTok remains top in the most downloaded app list for months on the Apple App Store and Google Play Store.  According to the lawsuit, Tiktok shared the user's created videos which include private acts and closeups of user's faces (biometric data) before the videos are saved on the app. TikTok provides many options includes the next button, close button, and button for effects to its users while recording the video. Here, the next button takes users to the screen that shows these two options : "post" and "save".  After clicking on the "next" button, Tik

Facebook, Instagram and WhatsApp Down : Apps Crash For Users Worldwide Including In India

If you are facing problems with Facebook , Instagram , and WhatsApp on your device then you are not alone. Suddenly, the service of Facebook, Instagram, and WhatsApp's are facing technical problems since late evening on Wednesday. Users are facing these types of problems on Facebook :- While using Facebook, Users are facing problems in loading images, loading videos, and loading all other data across its apps while some users were unable to load photos on Facebook News Feed. On the Twitter platform, Facebook said that it is aware of the issue. Users are facing these types of problems on Instagram :- On Instagram (just like Facebook apps), the issues appear to be limited only to a certain part of the site. Many users report an issue to Instagram that their feed might not load, also it is not possible to post anything new (images, videos, stories) into it. If a user tries to post anything new (images, videos, stories) brings up an error indicat