Yandex private repositories merged into the network🤣


Yandex private repositories merged into the network🤣

Anonymous hackers have published an archive on the BreachForums forum, including the contents of internal Git repositories of Yandex Corporation.

All files are dated February 24, 2022. The archive, which is 44.71 GB in size, includes sections of repositories with the code of 79 services and projects of the company:

▫️Search engine (frontend and backend), 
▫️Page indexing bot, 
▫️Yandex Metrika web analytics platform, 
▫️Yandex Maps mapping system, 
▫️Alice Voice Assistant, 
▫️Support Service Information System, 
▫️Yandex Taxi, 
▫️Yandex Phone, 
▫️Yandex Direct advertising platform, 
▫️Yandex Mail mail service, 
▫️Yandex Disk Storage, 
▫️Content Delivery Network, 
▫️Yandex Market Trading Platform, 
▫️Yandex360 Business Services, 
▫️Yandex Cloud Cloud Platform 
▫️Yandex Pay payment system.

The corporation confirmed the leak.😅

However, the so-called "IT specialists of Yandex Corporation" claim that hackers allegedly received data not as a result of hacking, but the contents of repositories leaked from the corporation differ from the current version that is used in Yandex services.

In addition to the code, the archive also has internal documentation, which mentions links to web services in the company's intranet network. And enthusiasts have already identified several API access keys that were supposedly used in the testing process, but were not used in working environments.

The reputation of the security of the corporation's proprietary services has once again suffered enormous damage.😎


Go back
26-01-2023, 12:22