Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Vonage account hacking? - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Vonage account hacking?

We received one report of a Vonage customer who received an email saying their password was changed. They typed the correct url directly into their browser and attempted to login with their “very difficult to guess random key password” but that failed. He tried the password that was provided via the email he and was able to access his account. He discovered that his last name was changed to something rather derogatory and that his phone numbers had been detached from the system.

If anyone else is seeing similar issues please let us know.


This came from Ben:
“Not even authorized users (account-holders) of the Vonage service can remove a line from the account without having to call into Vonage customer care.“



206 Posts
Aug 3rd 2007

Sign Up for Free or Log In to start participating in the conversation!