Truecaller Fixes Flaw That Could Let Attackers Use Malicious Links to Harvest IP Addresses, Other User Data

Truecaller has fixed a flaw in one of its APIs that could allow attackers to place malicious links as a profile URL. It could let attackers harvest IP addresses of users and perform attacks such as brute-force and DDoS.

from Meet Patel