isaacanteparac / ui-design Goto Github PK

Dear Isaac,

Entelgy Innotec Security manages the fraudulent actions against Santander and all issues related to security incidents against this company.

We have detected that your repository contains the name and logo of our client without authorization, is public and accessible for anyone and is located in the following URL(s):

https://github.com/isaacanteparac/UI-design.git
https://raw.githubusercontent.com/isaacanteparac/UI-design/54dbee3263b556c09c8228c9bb9665cff1a85832/web/webinfo-thousandSuns/view/index.html

As you can check with evidences, in the lines 143 and 145, you have published an image that contains the name and the logo of our client, Santander Mexico:

https://ibb.co/SK2cSft
https://ibb.co/LdVt6YL

These are the exact links in which you can find the data we are talking about:

• Line 143:

  UI-design/web/webinfo-thousandSuns/view/index.html

  Line 143 in 4d657ad

  src="https://www.santander.com.mx/personas/santander-digital/supermovil/assets/img/img-header.png"

• Line 145:

  UI-design/web/webinfo-thousandSuns/view/index.html

  Line 145 in 4d657ad

  onclick="windowBlurImg(true, 'https://www.santander.com.mx/personas/santander-digital/supermovil/assets/img/img-header.png')"

As our client is a registered trademark (as you can check with the following link), the unauthorized use of its name, logo and images, may be an infringement of intellectual property and copyright laws:

WIPO link: https://branddb.wipo.int/branddb/en/showData.jsp?ID=MXTM.0119852025895

This unauthorized use of restricted information represents a security risk of Santander. We need your collaboration to remove these data, by getting offline this content from the reported URL(s). If you need more information regarding this incident, please contact our CSIRT 24/7.

Thank you very much for your attention. Looking forward to your reply.

Regards,

Juan Esteban García Flood

---

CSIRT | Entelgy Innotec Security

Email: [email protected]

---