A Severe Security Flaw Was Detected In Mr.Robot's Season 2 Website
A Severe Security Flaw Was Detected In Mr.Robot's Season 2 Website

As we all know that the very popular Mr. Robot is an American drama–thriller television series created by the Sam Esmail. It stars Rami Malek as Elliot Alderson, a cybersecurity engineer and hacker who suffers from social anxiety disorder and clinical depression. Recently a hacker reported a security flaw in Mr.Robot’s Season 2 website which known as “whoismrrobot.com” .



A Severe Security Flaw Was Detected In Mr.Robot’s Season 2 Website

It is, very common thing that most of the movie and TV show try to get the advantage of the viral marketing these days, but, very few are more well-suited to it. As we all know that very popular USA Network’s “Mr. Robot” which was aired its first season last summer, and now it was assumed one of the best computer hacking series in recent memory.

Mr. Robot is an American drama–thriller television series which was created by the Sam Esmail. It stars Rami Malek as Elliot Alderson, who is a cybersecurity engineer and hacker who suffers from social anxiety disorder and clinical depression.

Recently the network launched a new promotional website known as “whoismrrobot.com” to jumpstart the viral marketing for its next series of Mr.Robot (Mr.Robot season 2). However, the network has recently fixed a severe security flaw in its promotional website which could have easily allow any nefarious hackers to access the millions of fans of the show.

But, the network should thanks to the alias Zemnmez, a white hat hacker who identified a Cross-Site Scripting (XSS) vulnerability in the promotional website of “Mr. Robot” on Tuesday, when the site was launched.

The new series of the Mr.Robot (Mr.Robot season 2) also features a surprising guest, the President of US, Barack Obama, who is giving a speech about a cyber threat faced by the country. However, the alias Zemnmez, a white hat hacker who reported the XSS vulnerability to the “Mr. Robot” creator, could have performed many malicious tasks but instead of performing any malicious tasks the white hat hacker Zemnmez responsibly reported the XSS vulnerability to the creator of Mr. Robot, Sam Esmail.

As we mentioned earlier that the network has confirmed that they had fixed the error late Tuesday night. As the white hat hacker, Zemnmez reported that the XSS vulnerability could have allowed any attacker to apply malicious Javascript files and codes to steal users information as well as including the Facebook data of the users of “Mr. Robot” website who entered in a quiz.

Moreover, the white hat hacker, Zemnmez said that “A threat actor with XSS on whoismrrobot.com could [have used] the XSS vulnerability to inject Javascript, which inherits the ability to read Facebook information from the fsociety game,” Zemnmez said. “This could be done mostly silently if correctly engineered with a short popup window”.


COMMENTS

AUTHOR