{“lastseen”:”2025-10-16T14:58:19″,”description”:”The Cybernews research team found that video call app Huddle01 exposed email addresses, real names, and other identifiers through an unprotected Kafka broker.\\n\\nThink of an unprotected Kafka broker like a post office that stores and delivers confidential mail. Now, imagine the manager leaves the front doors wide open, with no locks, guards, or ID checks. Anyone can walk in, look through private letters and photos, and grab whatever catches their eye.\\n\\nHuddle01 is a video call app that focuses on decentralized Web Real-Time Communication (WebRTC). WebRTC is appealing because it lets people talk and share data directly between devices without using a central server. Done right, this can reduce latency, cut costs, and improve privacy.\\n\\nBut leaving your Kafka broker open to anyone who happens to stumble upon it does not qualify as \\”doing privacy right.\\” The Kafka broker operated without authentication or encryption, meaning anyone could listen in, collect logs, or potentially alter data if write access existed. This demonstrates a fundamental misconfiguration that puts both users and the platform at risk.\\n\\nThe Kafka instance contained over 621,000 log entries from the last 13 days, belonging to Huddle01, including:\\n\\n * Usernames (sometimes real names)\\n * Email addresses\\n * Crypto wallet addresses (Huddle01 supports many wallets across blockchains like Bitcoin and Ethereum)\\n * Detailed activity data, such as which users joined specific calls, participants in each call, country, time, date, and duration\\n * Other identifiers\\n\\n\\n\\nThe app is popular among cryptocurrency users, but in this case the open Kafka instance could have deanonymized their wallets by tying their crypto wallets to usernames and email addresses. Which also paints a target on their back as potentially high-value targets.\\n\\nIt also makes users more vulnerable to social engineering since attackers can craft credible emails or messages using real names and meeting data.\\n\\nAnd hold on for the worst part. Cybernews states it responsibly disclosed the data leak to the company behind Huddle01\u2026\\n\\n\\u003e \u201cHowever, it did not respond to the initial disclosure and subsequent attempts. After one month, the exposed server remained accessible. It\u2019s unclear how many other third parties might have accessed the data.\u201d\\n\\n## Security tips for affected users\\n\\nKnowing that the exposed information goes back about two weeks doesn’t help much, since anyone with access could have set up a data collector, listening in on the real-time data streaming and processing going on.\\n\\nSo, any Huddle01 users should:\\n\\n * Change passwords on accounts linked to the exposed email or username, and use strong, unique passwords for each site.\\n * Set up two-factor authentication (2FA) wherever possible to prevent unauthorized access.\\n * Monitor inboxes for suspicious messages. Be extra cautious of emails or texts asking for crypto transactions or sensitive information, as targeted phishing is a possibility. Be especially wary of social engineering attempts that reference details from meeting logs, such as who you spoke to or when meetings occurred.\\n * Stay updated on official statements from Huddle01 or news coverage, as they may release more guidance later.\\n\\n\\n\\n**Pro tip:** Did you know that you can submit suspicious messages like these to Malwarebytes Scam Guard, which instantly flags known scams?\\n\\n* * *\\n\\n**We don ‘t just report on scams\u2014we help detect them**\\n\\nCybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard, a feature of our mobile protection products. Submit a screenshot, paste suspicious content, or share a text or phone number, and we\u2019ll tell you if it’s a scam or legit. Download Malwarebytes Mobile Security for iOS or Android and try it today!”,”published”:”2025-10-16T14:20:50″,”modified”:”2025-10-16T14:20:50″,”type”:”malwarebytes”,”title”:”Video call app Huddle01 exposed 600K+ user logs”,”source”:””,”references”:””,”id”:”MALWAREBYTES:72105F2AFC759BC73C9E867FDFE2EAD9″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/video-call-app-huddle01-exposed-600k-user-logs”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-16T14:58:19″,”description”:”The Cybernews research team found that video call app Huddle01 exposed email addresses, real names, and other identifiers through an unprotected Kafka broker.\\n\\nThink of an…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-22072","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n