Hello, everyone, and welcome to this video.
So this is a very interesting find by one of the security researchers in which he was able to take over
a company's Instagram page in two minutes.
So this is, again, an example of broken link highjacking.
So are you thinking I heard about subdomain hijacking, but what is broken link hijacking?
So there is only one difference between what it involves an expired link onto the target page.
All right.
So we know this now.
When the user came onto the target web application, he came onto one of the order that was Instagram,
as you can see over here, Instagram, dot com target instar one, two, three.
And you can see sorry the speed isn't available.
Message onto the target Instagram page of the target company.
Now we can take over this particular target name, so he successfully created and he was able to take
over the company's Instagram page, so impact.
The issue is more reputational than monetary loss to the company.
Attacker can post bad content in the name of the company as the page is linked into the website.
So whenever a legitimate user comes and clicks will be redirected to the attacker controlled account.
Now, the impact can also be increased in a way that the attacker tries to communicate with the users
through the name of the organization on which the account has been successfully created.
That can also lead to monetary loss.
So this was a very, very simple report that was identified and reported to the target organization.
So this gives you a brief idea of how not to miss these types of vulnerabilities into the social media
handles on any target of application.
So I hope you guys understood this.
Thank you.