Taboola doesn’t really go into much detail as to how the hack took place or what measures it has put in place to prevent it from happening again (perhaps unsurprising for an incident which took place over the weekend) but there will perhaps be concerns that other users of the popular widget could have potentially been put at risk.Īfter all, Taboola claims to have high traffic sites such as TMZ, Time, The Weather Channel, BBC, and USA Today amongst its customers. We immediately changed all access passwords, and will continue to investigate this over the next 24 hours.
While we use 2-step authentication, our initial investigation shows the attack was enabled through a phishing mechanism. There is no further suspicious activity across our network since, and the total duration of the event was 60 minutes.
The breach was detected at approximately 7:25am, and fully-removed at 8am. The intruder was redirecting users that accessed article pages on to a different landing page. Today, between 7AM – 8AM EDT, an organization called the “Syrian Electronic Army” hacked Taboola’s widget on.
0 kommentar(er)
