Microsoft Youtube Channel Compromised

The Microsoft Youtube channel was recently compromised and is still under investigation. The attacker changed the content videos that surprisingly was not pornography or something ridiculous, but he posted four short videos that advertised he “hacked” the channel. It surprises me how easy it is for any attacker to compromise account for social networking sites, even email providers including Gmail and Yahoo, and most of it goes unnoticed and nothing is done about it. People place a large amount of trust in large corporations such as Google and Facebook for their identities on the internet. Accounts can be compromised by answering simple recovery questions that can be researched by an attacker using social engineering or other resources. Google, for an example, has responded with the two-step verification to make it more difficult to compromise an account, but it does not force users to use it nor does it advertise.

Advertisements