The General Directorate of Traffic (DGT) has added another chapter to the book of public organizations and institutions in Spain with bad practices regarding cybersecurity.
As several users from this world have shown on LinkedIn, such as Carlos Cantero, specialist in Cyber Intelligence and OSINT at Lazarus Technology, A video published in Informativos Telecinco has revealed vital data for the organization.
Concretely, can be clearly seen when stopping the frame what a sticker appears at the bottom of the monitor with the username and password.
«The fact that the DGT has the username and insecure password attached the monitor itself gives a lot to think about, especially knowing the hell that Spain is in terms of data protection,» Cantero shares in his publication.
And, perhaps worst of all, the password was as easy as 54321one of those that always we recommend not using, since they are part of dictionaries to perform brute force attacks.
Although leak could be even more damaginggiven that You can also see at the top of the monitor the domain in question of the service that manages DGT incidents.
«In this case, it is even worse,» acknowledges the specialist. «Apart from exposing the URL of a seemingly sensitive tool, username and password data are leaked. The password, by the way, something as secure as 54321.»
Taking into account that the domain along with the login credentials have been leaked, a person with access to monitoring tools could find data theft associated with this.
However, it is most likely that this private URL is protected by a VPN or IP address filteringsomething essential so that any random person cannot access such a crucial service.
If you don’t want it to happen to you like the DGT, there are several recommendations to take into account so that a password is as least vulnerable as possible. First of all, do not write it down in visible places.
This also applies to screenshots saved on mobile, as there are some types of Malware that can obtain these types of fileswhich would easily grant your credentials.
Additionally, it is most recommended using a password managerso you won’t have to remember all your services, but just a teacher to make everything easier and safer.
And finally, if you are going to make a live recording or capture, consider reserve a private space for all your information personal, since you could end up leaking your data on a live news show.