writeups.xyz / React debug.keystore key was trusted by Meta(Facebook) which caused to Instagram account takeover by malicious apps.

Submitter : c2a

Date: 19 July 2022

Bounty : 12,000

Vulnerabilities :

• Account Takeover
• Android

Programs :

• Meta / Facebook

Authors :

• Dzmitry Lukyanenka (@Vulnano)

Link :
https://www.vulnano.com/2022/07/react-debugkeystore-key-was-trusted-by.html