Online Casinos in general: Hacker attack on Merkur Bets (Page 22)

gamble1 wrote on 15.04.2025 at 16:12:

I received an overview from The Mill today of what data was affected. They write that as far as they know, no one except the white hat hacker had access to the data, but they can't guarantee that.

This post has been translated automatically

frapi07 wrote on April 15, 2025 at 6:00 pm:
Yes, that's the next problem too. Of course you can't guarantee anything. But the stalls claim that no one else had access to it. They couldn't possibly know that. You can also find statements (or emails) here where they write false facts. I don't want to imply whether this is done deliberately, but it has already happened to some people here. Example: GGL would have discovered this security gap, the hacker did not want to misuse the data (although the misuse had already taken place).

I'm not an IT expert, but I'm interested in how the hacker did it. We read that a GraphQL of an API was the cause of this vulnerability. This GraphQL had inadequate authorization, which allowed the data to be retrieved. So it wasn't an infiltrated virus, a Trojan or a phishing email, no - it simply wasn't secured well enough.

Maybe I'm a noob, but I think that every computer scientist has worked with GraphQL or has already dealt with it. I've read that many companies use it, precisely because GraphQL is very efficient at querying data. I don't want to put my hand on the fire, but I think quite a few could have abused this loophole.

This post has been translated automatically

Comingsoon19 wrote on April 16th, 2025 at 11:28 am:

Hello,

I come from the IT industry and yes with expert knowledge anyone could have done this. It was not a direct hack. The data was visible to anyone with some experience due to the gap in the interface. But it's really not easy to exploit this error.

And there really are these "hackers" who point this out positively without any ulterior motives or blackmail etc.

This post has been translated automatically

This post has been translated automatically

Danny0815 wrote on 16.04.2025 at 17:55: "CrazyBuzzer BECOMES SLOTMAGIE"
I don't know if there is a connection. Does anyone know if this has been planned for a while?
A merger like this usually results in cost savings.
The "war chest" needs to be filled.

This post has been translated automatically