How Did an 18-Year-Old Hack Uber?

An 18-year-old hacker gained admin access to Uber on September 15, 2022. These are the steps that the hacker took: The hacker obtained an Uber employee’s phone number. He directed the employee to a phishing site that looked like an Uber login page. The employee logged in and the hacker gained his credentials. The hacker tried to get around the MFA by doing a Multi-Factor Authentication Fatigue attack. This attack consists of spamming MFA requests to the employee until he gets annoyed enough to allow the login attempt to go through....

2022-09-24 · 3 min · Ally Petitt