Wednesday 28 September 2022, Safety Guide

Data of 50,000 users were stolen from Revolut

Lost24

The following were stolen in the attack:


  • names and surnames
  • e-mail addresses
  • residential addresses
  • information about transactions.


It is worth adding that passwords and card data have not been obtained. Unfortunately, it is not known how many Polish accounts were affected by this attack



Source: 

Lost24

Soon it will be possible that a new government application will be pre-installed on new smartphones. It is supposed to be obligatory. Many people have two government applications installed on their phones. These are the Regional Warning System and Alarm112. Both are freely installable, there is no obligation to have them. These are not as popular applications as they could be, so maybe hence the idea to pre-install government applications on all Poles' smartphones?


Will it come to this? At the moment, only a law has been prepared that would impose the obligation to install the government application on all new phones. What is worth adding, the act provides for the possibility of voluntarily uninstalling this application.

Tuesday 6 September 2022, Safety Guide

Samsung hacked (again)

Lost24

In March this year, Lapsu $ Group stole 190GB of data from Samsung. This time, Samsung was attacked again.


This took place in July. Among other things, the private data of some users were stolen, such as surnames, first names, contacts and demographic data. There were no card numbers or passwords in the leak, though. However, it is worth changing your password if you haven't done it since March.


Source: instalki.pl


Lost24

Is cryptocurrency investment a good option when you don't know the market?


A 72-year-old from Gdańsk tested it on his own skin and (unfortunately) it was not a good idea. After the investment, the man was to receive a very large profit. The credibility of this scam was strengthened by the images of famous people, good opinions and a "professional" looking website for investing (everything was false, of course). The man, encouraged by such positive opinions and encouraged by the criminals, transferred his savings and then additionally took out a loan. Only after doing the latter did he realize there was something wrong and reported it to the police.




Lost24

Due to a fairly serious case of contamination of the Odra River, many of us received SMSs today. The Government Center for Security has notified about the ecological threat

Despite the fact that we receive the message from the addressee "Alert RCB", the content of the SMS is slightly disturbing. A strange looking string of numbers that doesn't look random. After a while, however, we got the correct SMS.


What could it be?

  

It is possible that it was simply a failed test, or a bug in the software that is sending these alerts.

Therefore, you should not be afraid of such text messages, but it is still worth approaching them with a distanc

Lost24

As reported by the portal Bezprawnik.pl, the theft procedure could last several years. Sensitive data, i.e. PESEL number, name, surname were to be stolen. On the government website gov.pl, a message about a security audit was carried out, which showed that during this time, many times an unauthorized person could have access to data from the Land and Mortgage Register.




Recently, there has been a proposal to create a system that would allow for the reservation of the PESEL number. We described it in our other post. Reserve

Lost24

According to the Gazeta Prawna website, is to arise central base that will give you abilitiy to block your PESEL number for free. This will make it impossible to take out a PESEL loan or payday loan.

 

Such a solution:

- It will increase data security
- Ability to control the situation in the event of data leakage


At the moment, the method of operation of such a website is unknown. At one point, when signing the moment, it will be possible to unblock the PESEL number, then, after concluding a contract with a bank or telecommunication operator, block it.


This could be a breakthrough solution.


Source: <

Lost24

As Niebezpiecznik.pl reports, many people have been receiving text messages with information about the activation of the "Christian quote for each day" service, its cost is "only" PLN 19.90 / week. Thus, it can be seen that this is quite a painful financial scam.



Fraudsters inform us that we can turn OFF the service by sending a message to the number that wrote us a text message with the title "JESUS ​​I TRUST IN YOU". The problem is that we activate the paid subscription with this message.



What to do when we receive this type of SMS?



Lost24

Few days ago, there was a meeting in which the mayor of Berlin had the pleasure of meeting Vitali Klitschko. Or so she thought at first. After time, however, it was realized that this is not a real person, but a deepfake. The alleged Kłyczko seemed credible at first, but after a few minutes people began to suspect that something was wrong. The main reasons for disbelief were questions about the number of Ukrainian refugees admitted to the capital. Also he asked to send Ukrainian refugees back to the country.


What is deepfake? It is a photo or video processing technique that combines two or more videos / photos using artificial intelligence so that it is as credible as possible.


Source: 

Read more

0 - Comment

Lost24

The new WhatsApp feature is coming out of beta. It is the personalization of the displayed data.
Among other things, it will be possible to choose who from our contact list can see our profile picture or status.

There will also be an option "Everyone except .."

Additionally, the operation of group conversations has been improved.


Source:

Read more

0 - Comment

Lost24

The College of Cybersecurity has recognized that Kaspersky Lab's software has a negative impact on public security. These include Kaspersky Internet Security, Kaspersky Anti-Virus, Kaspersky TOTAL Security and Kaspersky Safe Kids. Using this software poses a risk to information security, as reported by gov.pl


For security reasons, we advise you to stop using Kaspersky's software


Source:

Read more

0 - Comment

Lost24

During the Pwn2Own hacking festival, Mozilla Firefox and Thunderbird security were hacked several times. Mainly, these were zero-day vulnerabilities, i.e. ones that no one had ever known about before.

One of the more interesting attacks as Mozilla says "An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process,"

The winners received $100,000 for discovering bugs in Mozilla's software

Read more

0 - Comment

Lost24

As reports niebezpiecznik.pl on the government website biznes.gov.pl anyone could have access to classified information from entrepreneurs through a simple trick. Namely - by going to the My company tab, then clicking View details, you can see classified data about your company, mainly, certificates. The trick was that by properly editing the URL, you could enter the ID of another entrepreneur, and thus have access to his classified data.



"https://konto.biznes.gov.pl/pl/moje-konto/moja-firma/(modal:podglad-wpisu/[IDENTYFIKATOR])"



The data that can be found there is

Lost24

The security of Bulgarian e-mail has been compromised by the use of ransomware. The incident happened before the Orthodox Easter holidays.

The two main areas affected are postal mail handling and the payment of retirement benefits.

About a week before the attempt to pay retirement benefits, the attackers broke into the Bulgarian e-mail server. The day after the payment of benefits (April 15), encryption of the Bulgarian mail servers began. Backup servers also fell under the attack.


According to Bulgaria's deputy prime minister:

     6,600 computers, 100 servers are attacked
     3,000 computers were over 15 years old