Mac anti-malware app maker stored 13 million customer details in plain sight
MAC USERS have been warned to be on the lookout after anti-malware maker MacKeeper exposed details of 13 million of its customers.
The leak was revealed by Chris Vickery, a noted security researcher, who posted details to Reddit over the weekend. The data was obtained by Vickery with no exploit or hack.
Let's put that another way. MacKeeper's sensitive customer data was available on the web. In the clear. All it took was specialist search engine, Shodan.io, which is capable of scanning for devices that Google can't reach. The data came in the form of an unsecured MongoDB database on port 27017 including a 21.2GB file called 'Users'.
