Categories: Security News

New Cryptocurrency Bezop (BEZ) Leaks More than 25,000 Investors Personal Information

Bezop (BEZ) is a decentralized peer to peer e-commerce order management and processing system powered by smart contracts, an autonomous buyer-seller protection service, and a simple vat collection systemall built on a decentralized blockchain network.

It offers an easy copy paste integration which allows merchants to sell their products and services and get paid in bezop. The DOM built with open source languages Open source languages such as HTML5, React JS, Node Js, and MongoDB.

Security researchers from Kromtech Security identified a public MongoDB Database that contains over 25,000 investors details of New Cryptocurrency Bezop (BEZ).
The exposed database contains full names, addresses, email addresses, encrypted passwords, wallet information, along with links to scanned passports, driver’s licenses, and other IDs.

At the time Bezop (BEZ) launched it runs a Bounty Programme to reward early adopters who spread the word about BEZOP and the people who promote Bezop Tokens on Facebook would earn Bezop Tokens.

Also Read Unprotected MongoDB database contains a 19 Million California state voters information

They left one of the table “Bounty” open “so it appears that the database left unprotected may contain the information for the people who invested and participated in this part of the program” says Kromtech Security.

Leaving the early investors data on the public is not a good site for the new startup “Given the changes to MongoDB, it would have to have been deliberately configured to be public, a configuration which should not even be risked internally” says Kromtech Security.

The publically available database details have been notified to Bezop by Kromtech Security and now the database secured by Bezop.

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a Taiwanese…

5 hours ago

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals in…

5 hours ago

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215 against…

5 hours ago

Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors to…

5 hours ago

New Windows Zero-Day Vulnerability Let Attackers Steal Credentials From Victim’s Machine

A security researcher discovered a vulnerability in Windows theme files in the previous year, which…

5 hours ago

SYS01 InfoStealer Malware Attacking Meta Business Page To Steal Logins

The ongoing Meta malvertising campaign, active for over a month, employs an evolving strategy to…

6 hours ago