Atash Security Group Attack Irancell

The hacker and administrator Omid Killer of the Iranian hacker group Atash Security Group has claimed responsibility for exposing a XSS -Cross Site Scripting- vulnerability in a subdomain of the Irancell cellular operator. The affected domain is: www.ecare.irancell.ir

The link to the vulnerability is here: http://xssed.ir/mirror/2074.html
The page is vulnerable to allowing HTML code injection and so a reflected XSS can be performed. The link to show this is here

The reflected page shows the following text:

“Resource /sspportal/login

Xssed By OmidKiller
Atash Security Group”

To see other Atash Security Group activity, see this link

Contact/follow the team:

• Telegram: www.telegram.me/atashsec
• Instagram: www.instagram.com/Atash.Sec