STOCK MARKET BSE NSE

After Google, Twitter warns Indian users about data breach

Twitter recommended updating to the latest version for Android as the issue did not impact 'Twitter for iOS'.

Published: 21st December 2019 02:56 PM  |   Last Updated: 21st December 2019 03:27 PM   |  A+A-

Social Media

For representational purposes

By IANS

NEW DELHI: In an extremely stressful year for Internet users, Twitter on Saturday admitted a malicious code was inserted into its app by a bad actor that may have compromised some users' information worldwide, including in India, as people woke up to an email from Twitter, warning them to update the app for Android.

The vulnerability within Twitter for Android could allow the bad actor to see non-public account information or to control your account (send Tweets or Direct Messages), said an apologetic Twitter.

"Prior to the fix, through a complicated process involving the insertion of malicious code into restricted storage areas of the Twitter app, it may have been possible for a bad actor to access information (Direct Messages, protected Tweets, location information) from the app," Twitter said in a statement.

The company said it does not have direct evidence that malicious code was inserted in to the app or that this vulnerability was exploited, but it can't be completely sure. Twitter did not divulge the number of users affected too.

"We have taken steps to fix this issue and are directly notifying people who could have been exposed to this vulnerability either through the Twitter app or by email with specific instructions to keep them safe".

Twitter recommended updating to the latest version for Android as the issue did not impact "Twitter for iOS".

"We're sorry this happened and will continue working to keep your information secure on Twitter," said the company in the email sent to the Indian users, adding that those affected can also reach out to Twitter's Office of Data Protection, requesting information regarding their account security.

The new data breach in Twitter was reported two days after several Indian users saw warning pop-ups from Google on their mobile and desktop screens as they opened certain affected websites in the Google Chrome browser, alerting them about a data breach on the site or app they had visited which also exposed their passwords.

The Internet giant issued a warning of a data breach for users in India and globally after fixing the Chrome 79 bug and re-issuing it for the public.

"Change your password. A data breach on a site or app exposed your password. Chrome recommends changing your password for the site," read the warning pop-up.

Twitter has faced several vulnerabilities on its platform in the recent past. In May, Twitter disclosed a bug that shared some iOS users' data with an unnamed partner, even if the users did not opt to share data. The bug affected Twitter's iOS user base and they were notified about the issue.

In February, a bug in Twitter exposed private tweets of some Android users for over five years when they made changes in their settings, like changing the email address linked to their accounts.

The vulnerability disabled the "Protect your Tweets" setting if certain account changes were made on Android devices.

In a mega data breach last year, the micro-blogging platform alerted all users to change their password after it discovered a bug that stored passwords in plain text in an internal system.

"Out of an abundance of caution, we ask that you consider changing your password on all services where you've used this password," said Parag Agrawal, Chief Technology Officer at Twitter.



Comments

Disclaimer : We respect your thoughts and views! But we need to be judicious while moderating your comments. All the comments will be moderated by the newindianexpress.com editorial. Abstain from posting comments that are obscene, defamatory or inflammatory, and do not indulge in personal attacks. Try to avoid outside hyperlinks inside the comment. Help us delete comments that do not follow these guidelines.

The views expressed in comments published on newindianexpress.com are those of the comment writers alone. They do not represent the views or opinions of newindianexpress.com or its staff, nor do they represent the views or opinions of The New Indian Express Group, or any entity of, or affiliated with, The New Indian Express Group. newindianexpress.com reserves the right to take any or all comments down at any time.

flipboard facebook twitter whatsapp