Tag Archive for: Uganda
Uganda Security Exchange Caught Leaking 32GB of Sensitive Data
Apart from personal and financial records, the data also included plain-text login credentials including usernames and passwords of customers and businesses using the Easy Portal of the Uganda Security Exchange.
The Uganda Securities Exchange (USE) aka principal stock exchange in Uganda has been caught leaking highly sensitive financial and sensitive data of its customers and business entities across the globe.
This was revealed to Hackread.com by Anurag Sen, a prominent IT security researcher who has been known for identifying exposed servers and alerting relevant authorities before it’s too late. Anurag is the same researcher who discovered Australian trading giant ACY Securities to be exposing 60GB worth of data earlier this month.
What Happened
It all started with Anurag scanning for misconfigured databases on Shodan and noted a server exposing more than 32GB worth of data to public access. According to Anurag, the server belonged to the Uganda Security Exchange’s Easy Portal. For your information, Easy Portal is an online self-service portal that lets users and trading entities view stock performance, view statements, and monitor their account balance.
“There are other ports running on the server which opened the link to the bank of Baroda – which is Indian based company operating in Uganda. Also, it is registered under the Uganda security exchange.”
Anurag told Hackread.com
What Data was Leaked
Upon further digging into the humongous dataset Anurag concluded that the exposed records were of sensitive nature. The worse part of the data leak is the fact that the server was left exposed without any security authentication.
This means anyone with a slight bit of knowledge about finding unsecured databases on Shodan and other such platforms would have complete access to USE’s data including the following:
- Full Name
- Usernames
- Full Address
- Date of Birth
- Access tokens
- Phone Number
- Email Address
- Plaintext passwords
- ID number of Users
- Bank details including ID, and account number
- Details on Foreign citizens and companies including citizens based in Uganda
The screenshot below shows the type of data exposed by the USE:
Uganda Security Forces Ordered To Stop Detention Of Losing Presidential Candidate : NPR
Soldiers patrol outside presidential challenger Bobi Wine’s home in Magere, Kampala, Uganda, Jan. 16, after President Yoweri Museveni was declared the winner of the election.
Nicholas Bamulanzeki/AP
hide caption
toggle caption
Nicholas Bamulanzeki/AP
Soldiers patrol outside presidential challenger Bobi Wine’s home in Magere, Kampala, Uganda, Jan. 16, after President Yoweri Museveni was declared the winner of the election.
Nicholas Bamulanzeki/AP
A Uganda judge has ordered state security forces, who have kept the losing presidential candidate Bobi Wine detained in his home since mid-January, to stop surrounding Wine’s residence.
Wine, 38, a popular singer whose real name is Kyagulanyi Ssentamu, was the main opposition candidate in the Jan. 14 presidential election. President Yoweri Museveni was reelected to a sixth term, winning 58% of the vote to Wine’s 34%, according to election officials. Wine disputes the results.
The court ruled that Wine’s effective house arrest was not in accordance with the law and that if the government wants him detained it should charge him with a crime, The Associated Press reports from the Ugandan capital, Kampala.
The AP says Museveni’s government has not yet responded to the court order and it’s not clear whether it will obey the ruling. Officials surrounded Wine’s house on Election Day and said he could not leave without a military escort, because he posed a threat to public order.
Museveni, who at 76 is twice Wine’s age, has been president for 35 years. Uganda has never had a peaceful transfer of power since the former colony gained independence from Great Britain in 1962.
NPR East Africa correspondent Eyder Peralta reported from Uganda that in the lead-up to the election…
Uganda tightens internet security after pro-gay attacks – Bizcommunity.com
|
Uganda tightens internet security after pro-gay attacks
Bizcommunity.com Uganda is tightening its internet security after hackers attacked the prime minister's website to post statements supporting gay rights, the country's internet regulator said on Friday, 17 August 2012. Activists hacked into the website of the prime … |