{"id":9275,"date":"2022-09-23T07:07:23","date_gmt":"2022-09-23T07:07:23","guid":{"rendered":"https:\/\/coingrafter.com\/index.php\/2022\/09\/23\/revolut-fell-for-social-engineering-attack-data-from-50k-users-exposed\/"},"modified":"2022-09-23T07:07:24","modified_gmt":"2022-09-23T07:07:24","slug":"revolut-fell-for-social-engineering-attack-data-from-50k-users-exposed","status":"publish","type":"post","link":"https:\/\/coingrafter.com\/index.php\/2022\/09\/23\/revolut-fell-for-social-engineering-attack-data-from-50k-users-exposed\/","title":{"rendered":"Revolut Fell For Social Engineering Attack, Data From 50K Users Exposed"},"content":{"rendered":"

[ad_1]
\n<\/p>\n

\n

It was Revolut\u2019s flip. Another day, one other information breach within the crypto world. About per week in the past, somebody inside the corporate\u2019s headquarters fell for a rip-off. According to Revolut, the social hackers solely had entry to the information \u201cfor a short period of time.\u201d And the breach solely affected 0,16% of their purchasers. Not too dangerous, proper? Well, apparently the attackers obtained 50K individuals\u2019s information and are already attempting to rip-off them. Plus, they could\u2019ve gotten management of Revolut\u2019s web site.\u00a0<\/span><\/p>\n

But let\u2019s begin initially. The firm\u2019s banking license is registered in Lithuania, so Revolut reported the incident to that nation\u2019s <\/span>State Data Protection Inspectorate<\/span><\/a>. They are those that exposed that the assault was by means of social engineering. Revolut didn\u2019t admit to that. The Lithuanian information safety company additionally supplied a jam-packed abstract of the case that incorporates many of the details:<\/span><\/p>\n

\n

\u201cAccording to the provided revised information, the data of 50,150 customers around the world (including 20,687 in the European Economic Area), such as names, addresses, e-mails, may have been affected during the incident. postal addresses, telephone numbers, part of the payment card data (according to the information provided by the company, the card numbers were masked), account data, etc.\u201d<\/span><\/p>\n<\/blockquote>\n

And, to cowl all of the bases, right here\u2019s the definition of \u201csocial engineering\u201d in accordance<\/span> to Investopedia<\/span><\/a>:<\/span><\/p>\n

\n

\u201cSocial engineering is the act of exploiting human weaknesses to gain access to personal information and protected systems. Social engineering relies on manipulating individuals rather than hacking computer systems to penetrate a target\u2019s account.\u201d<\/span><\/p>\n<\/blockquote>\n

What Does Revolut Admit To?<\/span><\/h2>\n

The firm described the incident as a \u201chighly targeted cyber attack\u201d wherein an \u201cunauthorized third party\u201d obtained entry to a small share of customers\u2019 private information. In an announcement shared <\/span>with Bleeping Computer<\/span><\/a>, Revolut continued:\u00a0<\/span><\/p>\n

\n

\u201cWe instantly recognized and remoted the assault to successfully restrict its influence and have contacted these prospects affected. Customers who haven’t obtained an e mail haven’t been impacted.<\/span><\/p>\n

To be clear, no funds have been accessed or stolen. Our prospects\u2019 cash is secure \u2013 because it has all the time been. All prospects can proceed to make use of their playing cards and accounts as regular.\u201d<\/span><\/p>\n<\/blockquote>\n

Not too dangerous, proper? Well, not less than one buyer who didn\u2019t obtain an e mail studies that he was contacted by the scammers. \u201cI didn\u2019t receive an email from you yet I receive a scam text message claiming it\u2019s from Revolut. How did they get my number and know I had a Revolut account?,\u201d <\/span>JT tweeted<\/span><\/a> a few days in the past. He obtained a generic \u201cHi there! Could you please contact our support team via in-app chat regarding this?\u201d as a response.<\/span><\/p>\n

The firm\u2019s official assertion ends with guarantees:<\/span><\/p>\n

\n

\u201cWe take incidents such as these incredibly seriously, and we would like to sincerely apologize to any customers who have been affected by this incident, as the safety of our customers and their data is our top priority at Revolut.\u201d<\/span><\/p>\n<\/blockquote>\n

Is there extra to the story, although?<\/span><\/p>\n

\"ETHUSD<\/p>\n

ETH value chart for 09\/23\/2022 on FTX | Source: ETH\/USD on TradingView.com<\/a><\/pre>\n
Lewd Language<\/span><\/h2>\n
There may\u2019ve been extra shenanigans happening, in line with Bleeping Computer. Apparently, Revolut customers reported that the help chat was <\/span>displaying foul language<\/span><\/a> close to the time of the social engineering incident. The publication clarifies:<\/span><\/p>\n
\n
\u201cWhile it is not clear if this defacement is related to the breach disclosed by Revolut, it shows that hackers may have had access to a wider range of systems used by the company.\u201d<\/span><\/p>\n<\/blockquote>\n
Did the hackers get entry to greater than the admitted information? Or was this a separate incident and the entire thing only a coincidence? Can we consider the studies? A few pictures show nothing, and there are not any dates on them. Why would the hackers deface the web site in the event that they had been after cash? On the opposite hand, perhaps they did. And these messages may imply that they obtained extra entry than what Revolut admitted to.<\/span><\/p>\n
Featured Image by Kris<\/a> from Pixabay<\/a> | Charts by TradingView<\/a><\/pre>\n
\"NY<\/p>\n<\/p><\/div>\n