2 ms·
> As further proof that they had access to Oracle Cloud servers, the threat actor shared this URL with BleepingComputer, showing an Internet Archive URL that in
by financetechbro 2y ago
> As further proof that they had access to Oracle Cloud servers, the threat actor shared this URL with BleepingComputer, showing an Internet Archive URL that indicates they uploaded a .txt file containing their ProtonMail email address to the login.us2.oraclecloud.com server.
- andrewinardeer 2y agoSure. But this somehow could have been faked or staged. Why not a direct link?
- TheNewsIsHere 2y agoAre you suggesting the Internet Archive is vulnerable to being tricked into including arbitrary data in page crawls? Is there a known CVE? (Edit: Genuinely asking. That sounded adversarial.) We don’t have a lot of info on how Oracle manages that part of its infrastructure. If they were able to upload a file to the server, that instance or build may have already been replaced by another deployment. Perhaps with or without that vulnerability. An IA snapshot could preserve the evidence beyond such events.
- e11i0t 2y agoLol Internet Archive if it's vulnerable there'll be a ton of misinformation campaigns around it