fixthebug

🚨 Security Concern Report Dear @MTNNG, @MTN180 , This video, youtube.com/watch?v=DORKC6zX…, recorded on 14 August 2026, demonstrates a security issue that I believe requires investigation As shown in the video, a user connected to another subscriber’s mobile hotspot appears to be able to access sensitive subscriber actions, including options to purchase data or airtime associated with the subscriber/account This raises an important security and privacy concern, as a person who is merely connected to another subscriber’s hotspot should not be able to access, initiate, or authorize sensitive account transactions (such as demonstrated in the video) without appropriate authentication or authorization I recommend that you investigate whether this behaviour is intended and, if not, consider implementing an additional security control for sensitive actions, for example, this supposed to be requiring independent subscriber verification before purchases or other account-affecting transactions can be completed, otherwise, kindly remove this feature Note: I already instructed my team member to also escalate this matter with your security team .. So kindly review the attached demonstration and confirm whether this behavior is expected And If it is a security vulnerability (although it is 🌚) I hope it can be addressed promptly to protect your custormers (which I am one of ) Plus all my other security research contents, this video is also shared for responsible disclosure and security awareness purposes Thank you for taking this security concern seriously! I am @CoyEmerald1, A security researcher from Lagos , Nigeria 🇳🇬 who has been helping with your #security for a long time , and you even titled me ni “Good Samaritan.” 😅