A huge database of Thailand’s largest network, AIS, containing 8.3 billion internet records of millions of Thai internet users, has been leaked.
A security researcher named Justin Paine wrote in a blog post that he wrote 8.3 He announced that he had found a database with billions of internet records.. The records also contained Netflow data and DNS records. This database was available on the Internet in an unencrypted state.. Paine said that thanks to this type of database, it is possible to monitor what an internet user is doing simultaneously.. Using this database, Paine demonstrated how anyone can access multiple recordings from just one internet connection.. These include what kind of devices the person owns, what anti-virus program they use, or what browsers they use.. It also provides access to information about which social media apps and websites are frequently visited.
According to a report written in Techcrunch, Paine alerted AIS on May 13 about open databases, but received no response.. On top of that, Paine forwarded this vulnerability to ThaiCERT on May 21.. Thanks to the authorities who contacted AIS, the database was taken under control on May 22.
It is not known exactly who the database belongs to, but according to Justin Paine, such records in the database can only be controlled by someone who can control the internet traffic flowing across the network. removable. Unfortunately, it’s hard to tell whether the database belongs to an internet provider or a corporate client on the AIS network.. Therefore, AIS is expected to make a statement on the subject.
Registering DNS queries is a natural phenomenon in internet usage.. These records are included in data files called zone files.. As soon as you visit a website, your internet browser converts the web address to an IP address.. This conversion process tells your browser where this website is on the internet.. DNS records do not contain information such as passwords or personal messages.. However, it can reveal which apps you use or which websites you access.
This information may not pose a threat to the casual user, but it can be a big problem for high-risk individuals whose sources are sought after, such as journalists and activists.. These records can also be used to look at a person’s internet activity.
AIS Discloses on Leaking of Thailand’s Giant Database of 8.3 Billion Internet Records
AIS Public Relations Manager Saichon Submakudom said, “We are aware of the incident regarding AIS customers’ data.. During a brief period in May, we confirm that a small portion of personal and non-critical information was exposed during a scheduled test.. We are happy that this incident was brought under control in a short time.”
URL Shortening at Microsoft