Viber has confirmed a situation earlier this morning in which Viber appeared to have been hacked by the Syrian Electronic Army (a pro-government group of computer hackers aligned with Syrian President Bashar al-Assad). AppleSpot originally reported on the hack, though it was unclear the extent to which hackers accessed Viber systems.
Viber has now clarified that the hack only allowed access to two minor systems, a customer support panel and a support administration system. According to the company’s official response, “no sensitive user data was exposed and Viber’s databases were not ‘hacked’.”
The company did not confirm whether the attack came from the Syrian Electronic Army, though the hacker group does claim responsibility for the hack. Viber did, however, claim that the hack was the product of a phishing attack that was carried out against one of their employees.
Here’s the official statement:
Today the Viber Support site was defaced after a Viber employee unfortunately fell victim to an email phishing attack. The phishing attack allowed access to two minor systems: a customer support panel and a support administration system. Information from one of these systems was posted on the defaced page.
It is very important to emphasize that no sensitive user data was exposed and that Viber’s databases were not “hacked”. Sensitive, private user information is kept in a secure system that cannot be accessed through this type of attack and is not part of our support system.
We take this incident very seriously and we are working right now to return the support site to full service for our users. Additionally, we want to assure all of our users that we are reviewing all of our policies to make sure that no such incident is repeated in the future.
The hack took down the Viber support page, and replaced it with the following message and a screenshot of the hack.
Dear All Viber Users,
The Israeli-based "Viber" is spying and tracking you
We weren't able to hack all Viber systems, but most of it is designed for spying and tracking
The above screenshot was meant to act as proof that the hackers did in fact access Viber’s databases.
Viber also took the opportunity to respond to accusations of spying:
Viber, like many other companies such as Microsoft, Cisco, Google, and Intel maintains a development center in Israel. It seems like this caused some people to come up with some pretty bizarre conspiracy theories.
It goes without saying, that these claims are completely without merit, and have no basis in reality whatsoever.
We will continue to update this story as more information becomes available.
ConversionConversion EmoticonEmoticon