How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
Briefly

The article details a significant security breach involving TeleMessage, where a hacker accessed servers and discovered unencrypted message archives. The breach affected a user associated with US Customs and Border Protection and allowed the hacker to read internal chats from Coinbase, although Coinbase claimed no sensitive customer data was compromised. The article also critiques TeleMessage's marketing claims of end-to-end encryption, revealing that messages were stored unencrypted. This incident raises concerns about security practices in communication tools used by government and financial institutions.
They had just hacked a user with an email address associated with US Customs and Border Protection, confirming it was a TeleMessage customer.
I can read Coinbase internal chats, this is incredible, highlighting the severity of the security breach.
TeleMessage apps uploaded unencrypted messages to archive.telemessage.com, contradicting their claims of end-to-end encryption.
The hacker had spent 15 to 20 minutes on TeleMessage's servers and compromised a federal customer and a major cryptocurrency exchange.
Read at WIRED
[
|
]