1. Forum
  2. USENET
  3. alt.privacy

  • Cloud brute-force attack cracks Google users' phone numbers in minute

    From Nomen Nescio@nobody@dizum.com to alt.comp.software.firefox,alt.privacy on Thursday, June 19, 2025 02:49:15
    From Newsgroup: alt.privacy

    (I never give
    up my phone
    number to any
    site)

    h
    t
    t
    p
    s
    :
    /
    /
    w
    w
    w
    .
    t
    h
    e
    r
    e
    g
    i
    s
    t
    e
    r
    .
    c
    o
    m
    /
    2
    0
    2
    5
    /
    0
    6
    /
    1
    0
    /
    g
    o
    o
    g
    l
    e
    _
    b
    r
    u
    t
    e
    _
    f
    o
    r
    c
    e
    _
    p
    h
    o
    n
    e
    _
    n
    u
    m
    b
    e
    r
    /?td=keepreading

    A researcher
    has exposed a
    flaw in
    Google's
    authentication
    systems,
    opening it to a
    brute-force
    attack that
    left users'
    mobile numbers
    up for grabs.

    The security
    hole,
    discovered by a
    white-hat
    hacker
    operating under
    the handle
    Brutecat, left
    the phone
    numbers of any
    Google user
    who'd logged in
    open to
    exposure. The
    issue was a
    code slip that
    allowed brute-
    force attacks
    against
    accounts,
    potentially
    enabling SIM-
    swapping
    attacks.

    "This Google
    exploit I
    disclosed just
    requires the
    email address
    of the victim
    and you can get
    the phone
    number tied to
    the account,"
    Brutecat told
    The Register.

    Cloud attack
    cracks Google
    users' phone
    numbers in
    minute

    --- Synchronet 3.21e-Win32 NewsLink 1.2