#openbugbounty — Public Fediverse posts

Ich glaube es gibt eine Gruppe die scanned systematisch den IPv4 Adressraum und wenn da irgendwo eine neue Woltlab Suite Instanz auftaucht feuern die eine Openbugbounty Scam Mail raus.
Und wie man sieht ist das Problem auch nicht neu:
https://mastodon.social/@DocCool/115620762844478695

#openbugbounty #scam

Update: Die #OpenBugBounty #Scam-Mails machen immer noch die Runde:

--> https://cool-web.de/blog/email-openbugbounty-sicherheitsluecke-oder-spam-scam.htm

#Spam #Scam #Scareware #ITSecurity #ITSicherheit #Awareness #Email #Antiscam #Antispam

Hi #itsecurity folks. I have a question for a friend:
My friend got contacted by #OpenBugBounty about a vulnerability in his website. They say they do responsible disclosure, but in fact, they don’t disclose anything. My friend contacted the “security researcher” who found the vulnerability and that guy just asked for money. So nothing is disclosed to my friend (who thinks there probably is nothing serious, knowing his website).

So what’s the deal? Is OpenBugBounty a blackmailing site or legit?

Why does OpenBugBounty still only support Twitter login? Surely they've seen the writing on the wall by now??

On that topic, are there any alternatives to OBB that support more traditional, non social-network related logins?

#openbugbounty #twitter #security

After some time of radio silence, I saw another #OpenBugBounty phishing.

It pretends to be from openbugbounty.de and try uses a gmail contact

📬 Open Bug Bounty: Mehr als eine Million Schwachstellen behoben
#Hacking #Softwareentwicklung #BugBountyProgramm #Datenschutzgesetze #Drupal #ISO29147 #OpenBugBounty #Sicherheitsforscher #TelekomAustria https://tarnkappe.info/artikel/softwareentwicklung/open-bug-bounty-mehr-als-eine-million-schwachstellen-behoben-258941.html