Nextcloud · Report #1916565
Twitter Account hijack @nextcloudfrance
How it was found
Broken Link Hijacking (BLH) is a web-based attack where it exploits external links that are no longer valid. The attackers take over this expired, stale, and invalid external links on credible websites or web applications for malicious or fraudulent purposes.
Link Hijacking attacks occur because the website/ web application continues to contain links to expired/ stale resources/pages (loaded using external URLs).
Steps :
-
Go to last and click on Twitter icon.
-
It redirects you to the https://twitter.com/nextcloudfrance
-
It gives 404 at first and i takeover the username for Testing Purpose .
-
If you go to https://nextcloud.com/fr/ and click on Twitter Icon , now it redirect you to Attacker ( My ) Profile .
The best way to prevent Broken Link Hijacking attacks is to proactively identify such stale/ dead links and remove them from the website regularly.
Ref : https://hackerone.com/reports/1031321 https://hackerone.com/reports/1607429
Impact
Since the link can be hijacked so any attacker can claim the link and make fake twitter profile of Nextcloud and can do scam with them.