Categories: Security News

New Cryptocurrency Bezop (BEZ) Leaks More than 25,000 Investors Personal Information

Bezop (BEZ) is a decentralized peer to peer e-commerce order management and processing system powered by smart contracts, an autonomous buyer-seller protection service, and a simple vat collection systemall built on a decentralized blockchain network.

It offers an easy copy paste integration which allows merchants to sell their products and services and get paid in bezop. The DOM built with open source languages Open source languages such as HTML5, React JS, Node Js, and MongoDB.

Security researchers from Kromtech Security identified a public MongoDB Database that contains over 25,000 investors details of New Cryptocurrency Bezop (BEZ).
The exposed database contains full names, addresses, email addresses, encrypted passwords, wallet information, along with links to scanned passports, driver’s licenses, and other IDs.

At the time Bezop (BEZ) launched it runs a Bounty Programme to reward early adopters who spread the word about BEZOP and the people who promote Bezop Tokens on Facebook would earn Bezop Tokens.

Also Read Unprotected MongoDB database contains a 19 Million California state voters information

They left one of the table “Bounty” open “so it appears that the database left unprotected may contain the information for the people who invested and participated in this part of the program” says Kromtech Security.

Leaving the early investors data on the public is not a good site for the new startup “Given the changes to MongoDB, it would have to have been deliberately configured to be public, a configuration which should not even be risked internally” says Kromtech Security.

The publically available database details have been notified to Bezop by Kromtech Security and now the database secured by Bezop.

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago