Cybercriminals have struck again ... The target? The users of the second-hand sales platform, Vinted. Several hundred people have been victims of an elaborate hack, via a request to change their contact details, by SMS or phone call. These changes resulted in the loss of their kitty, filled by their completed sales.
The scammers focused more on the very full kitty, some with more than 800 euros collected. The hacking has not only hit France, where Vinted has a large part of its customer base, but also Spain and Italy. The cybercriminals automatically changed the bank details associated with the account, a maneuver that did not require any validation by email or SMS. In addition to the money, they have recovered the bank details of some members. And to prevent retaliation from hacked users, they pushed Vinted to block their accounts by publishing pornographic content.
Vinted explained that"the login information used (logins, passwords, ...) were obtained from data accessed elsewhere outside the platform and not related to Vinted". The platform also said that victims"will be eligible for compensation for money lost on their Vinted wallet".
The 65 million users are hoping that the platform will take additional steps to strengthen the security of their accounts and information. In the meantime, vigilance is required and it is recommended not to share login information with third parties or through questionable links.
