Categories: Security News

New Cryptocurrency Bezop (BEZ) Leaks More than 25,000 Investors Personal Information

Bezop (BEZ) is a decentralized peer to peer e-commerce order management and processing system powered by smart contracts, an autonomous buyer-seller protection service, and a simple vat collection systemall built on a decentralized blockchain network.

It offers an easy copy paste integration which allows merchants to sell their products and services and get paid in bezop. The DOM built with open source languages Open source languages such as HTML5, React JS, Node Js, and MongoDB.

Security researchers from Kromtech Security identified a public MongoDB Database that contains over 25,000 investors details of New Cryptocurrency Bezop (BEZ).
The exposed database contains full names, addresses, email addresses, encrypted passwords, wallet information, along with links to scanned passports, driver’s licenses, and other IDs.

At the time Bezop (BEZ) launched it runs a Bounty Programme to reward early adopters who spread the word about BEZOP and the people who promote Bezop Tokens on Facebook would earn Bezop Tokens.

Also Read Unprotected MongoDB database contains a 19 Million California state voters information

They left one of the table “Bounty” open “so it appears that the database left unprotected may contain the information for the people who invested and participated in this part of the program” says Kromtech Security.

Leaving the early investors data on the public is not a good site for the new startup “Given the changes to MongoDB, it would have to have been deliberately configured to be public, a configuration which should not even be risked internally” says Kromtech Security.

The publically available database details have been notified to Bezop by Kromtech Security and now the database secured by Bezop.

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Orange Communication Breached – Hackers Allegedly Claim 380,000 Email Records Exposed

Telecommunications provider Orange Communication faces a potential data breach after a threat actor using the pseudonym “Rey” claimed…

19 minutes ago

RSync Vulnerabilities Allow Hackers to Take Full Control of Servers – PoC Released

A series of critical security vulnerabilities in the widely-used Rsync file synchronization tool have been…

2 hours ago

Millions of WordPress Websites Vulnerable to Script Injection Due to Plugin Flaw

A critical security vulnerability in the Essential Addons for Elementor plugin, installed on over 2 million WordPress…

2 hours ago

New Undetectable Batch Script Uses PowerShell and Visual Basic to Install XWorm

A novel malware delivery framework employing advanced obfuscation techniques has evaded detection by security tools…

3 hours ago

2,850+ Ivanti Connect Secure Devices Exposed to Potential Cyberattacks

A sweeping cybersecurity alert has emerged as researchers identify 2,850+ unpatched Ivanti Connect Secure devices worldwide, leaving…

4 hours ago

US Employee Background Check Firm Hacked, 3 Million Records Exposed

DISA Global Solutions, a Houston-based provider of employee background checks and workplace safety services, disclosed…

4 hours ago