This article discusses a critical zero-day exploit targeting Nobitex’s email infrastructure, sold on a hacker forum for 10 BTC. The vulnerability could enable email domain takeover, leading to fraud, malware, and phishing attacks. #Nobitex #ZeroDayExploit
Keypoints
- A zero-day SMTP server vulnerability is being sold targeting Nobitex’s email system.
- The exploit allows complete email domain takeover via an authentication bypass.
- Potential threats include Business Email Compromise (BEC), malware distribution, and phishing.
- The exploit is unpatched and undetectable by firewalls or antivirus solutions.
- Stolen data includes over 50,000 customer and employee email addresses.