Information
f)upland
Root Cause Analysis
For External Release
TITLE: MobUe API RCA - OTP Issue - August 2024
DATE, TIME AND DURATION
START TIME: 2024/08/10 - 08:34 BST RESOLUTION TIME: 2024/08/10 -1235 BST DURATION: 4H 1M
OVERVIEW
- On Saturday, August 10th, the Upland Mobile AIPIIteam was informed by our third-party aggregator tihat they have identified suspicious activity which caused our account to be temporarily suspended. This caused One Time P,assword (OTP) to not be sent out properly and caused AIPII authentication to foil during the affected period. The Upland Mobile AIPI Dev team ur9ently worked with the third-party aggregator to resolve tihis issue.
ROOT CAUSE & REMEDIATION
- ROOT CAUSE:
- The incident was caused by the ,ag9regator placing a temporary suspension on Upland's account used for mess,age forwarding for EMEA regions.
- The account was disabled by lnfobip by revoking permissions.to send traffic dueto the team identifying that an unknown IIP was making HTTP APIIcallls.
- Our investig,ation has revealed that an unknown party gained acoess and was ,able to broadcast a small but seemingly fmudul•ent amount of SMS tmffilc. Only 3 text messages were sent and were benign in nature.
- There was no attempt to aocess portals, nor any PIiiiost or brute force attacks detected.
Keywords RCA 10th August 2024 Mobile api OTP issue waterfall
Solution ID
240905045544983
Last Modified Date
09/05/2024 04:56:33 AM
Renew Date
09/05/2025
Status
Published
Author
Taxonomy
- Waterfall > RCA-Root Cause Analysis > 2024
- Waterfall > API
- Waterfall > Messaging
Collections
- Waterfall Support
Upland RightAnswers Portal - Version 2024R2