If you are a regular user of Yahoo! Voices service, your ass will blast off to know that around 450,000+ users’ account credentials have been published on the nasty hackers’ website. The hackers have confirmed the way how they managed to hack the network of Yahoo! Voices service. Actually, they gained access to the sub-domain through a union-based SQL database injection and retrieved the users’ credentials information.
The hackers said in a statement:
“We hope that the parties responsible for managing the security of this sub-domain will take this as a wake-up call, and not as a threat,”
They further added:
“There have been many security holes exploited in web servers belonging to Yahoo! Inc. that have caused far greater damage than our disclosure. Please do not take them lightly. The sub-domain and vulnerable parameters have not been posted to avoid further damage.”
This news has been reported by TrustedSec. They also confirmed that the hacked server could have a connection with Yahoo! Voices. This statement was made on the basis of the exposure of the following URL: “dbb1.ac.bf1.yahoo.com” which was found in the database. Anyway, the news has not been confirmed by Yahoo!