top of page

PROJECT: SECURITY ASSESSMENT AND PUBLIC AWARENESS NOTICE - ADS AFRICA

  • Jun 9
  • 4 min read

PLEASE SHARE THIS PUBLIC DOCUMENT

This project investigates the security vulnerabilities and privacy risks associated with the website https://www.adsafrica.co.za/.


A client of SSS had their personal information unlawfully shared on this platform.

Despite the ad being removed, the damage (data exposure) had already occurred.

Attempts to contact the website via email have failed, and no direct owner or administrator is available.

This project outlines the critical security flaws of the website and provides recommendations for public awareness.

IDENTIFIED SECURITY VULNERABILITIES:

  • The following critical security flaws have been observed on adsafrica.co.za:

VULNERABILITY:

DESCRIPTION:

  • No 2FA (Two-Factor Authentication).

User accounts lack 2FA, making them easy to compromise through credential stuffing or brute-force attacks.

  • Fake account creation.

Anyone can create an account using false information and an invalid cellphone number — no verification required.

  • No administrator oversight.

No active admins are monitoring or moderating content.

  • No posting restrictions.

Users can post any content, including unlawful personal information, without filters or approval.

  • Unreachable ownership.

No direct contact method beyond an unattended email address.

No physical address, phone number, or support system.

REAL-WORLD DANGERS FOR USERS:

1. IDENTITY THEFT AND FRAUD:

  • Because anyone can post any information without verification, malicious actors can share:

    • Full names, ID numbers, addresses, phone numbers.

    • Bank details or private correspondence.

  • Once posted, this information can be harvested by scrapers, indexed by search engines, and used for fraud, phishing, or social engineering attacks.

  • No Recourse for Victims:

    • No admin means no one to request the removal of illegal content.

    • No reply from email means victims cannot exercise their rights (e.g., under POPIA in South Africa).

    • Even if an ad is eventually removed, the data may have already been copied or saved elsewhere.

2. ACCOUNT TAKEOVER RISK:

  • Without 2FA or email verification, an attacker could:

    • Create an account impersonating someone else.

    • Post false or damaging information.

    • Lock out the real person from creating a truthful account.

  • Legal Liability Confusion

    • Victims may mistakenly believe the platform is regulated or safe.

    • In reality, the website’s lack of security means the poster is likely anonymous, making legal action nearly impossible.

CASE EXAMPLE:

  • WHAT HAPPENED:

    • A client’s personal information was posted without consent on adsafrica.co.za.

  • ACTION TAKEN:

    • The ad was eventually removed, but the information had already been viewed.

  • ATTEMPTED REMEDY:

    • SSS sent emails to the website’s contact address — no reply.

  • RESULT:

    • No way to identify the perpetrator.

    • No way to prevent recurrence.

PUBLIC AWARENESS RECOMMENDATIONS:


Based on this investigation, the following warnings should be shared with the public:

WARNING – UNSAFE WEBSITE


adsafrica.co.za has no administrator, no 2FA, no account verification, and no content restrictions.

Do not share any personal information on this platform.

Assume anything posted there is public, permanent, and untraceable.


ADDITIONAL SAFETY RECOMMENDATIONS:

  • Never enter your ID number, address, or financial details on unverified classified sites.

  • Check whether a website has contact info beyond email (phone number, physical address, live chat).

  • If a site allows account creation without any verification, treat it as high-risk.

  • Before posting any ad, ask: Could this information be used to harm me or someone else if leaked?


Stay informed. Adapt to change. Prioritise security.

Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Channel.

This channel is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.


How to Join the WhatsApp Channel:

1. Make sure you have the latest version of WhatsApp on your device.

2. Click on the link below to join the Mike Bolhuis Daily Projects WhatsApp Channel:

3. Follow the prompts to join the channel.

4. Make sure you click on "Follow", then click on the "bell"-icon (🔔)

CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.

ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.

Regards,

Mike Bolhuis

Specialist Investigators into

Serious Violent, Serious Economic Crimes & Serious Cybercrimes

PSIRA Reg. 1590364/421949

Mobile: +27 82 447 6116

Fax: 086 585 4924

Follow us on Facebook to view our projects -


EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.


STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.


POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv

SSS TASK TEAM:

Copyright © 2015- PRESENT | Mike Bolhuis Specialised Security Services | All rights reserved.


Our mailing address is:

Mike Bolhuis Specialised Security Services

PO Box 15075 Lynn East

Pretoria, Gauteng 0039

South Africa

Add us to your address book


THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.

CONTACT US

Pretoria, 75 Wapad, Leeuwfontein Estate, Roodeplaat, 0186, South Africa

​​

E-mail: mike@mikebolhuis.co.za
Mobile: 082 447  6116
International: +27 82
447 6116
Fax: 086 585 4924

  • Instagram
  • Facebook
  • YouTube
  • TikTok
chat with mike bolhuis on whatsapp

Thanks for submitting!

Copyright © mikebolhuis.co.za

MLB DIENSTE CC Reg: 1995/036819/23

PSIRA Reg: 1590364/421949

Web design by Mike Bolhuis Cybercrime Unit

bottom of page