Founder and CPO at KARAKUM Soft Viktoriya Alexandrova learned details about the actions of fraudsters who took out a bunch of loans in her name. We’ll tell you the updates.
Founder and CPO at KARAKUM Soft Viktoriya Alexandrova learned details about the actions of fraudsters who took out a bunch of loans in her name. We’ll tell you the updates.
As a reminder, yesterday Victoria stated that scammers had hacked her account at «Diіa». Now she is a «borrower» in a number of financial institutions and microcredit organizations, although the specialist herself did not issue any loans. We wrote about the incident in detail here.
Here’s what new Victoria managed to learn about the incident.
The specialist claims that she filed a police report.
She also managed to clarify the situation with the bank. «I clarified with the OTP bank. In 2022, I had an individual entrepreneur account there, to which I received a salary. Then the individual entrepreneur closed it, but the account was not. Well, it was hacked and a few days ago an account was created in the OTP application and a virtual card there. The number that was linked is my former number, which has been inactive for at least a year and a half,» she said.
But, according to Victoria, another number is tied to «Diіa». «Therefore, I can’t even imagine how they could add their device to my „Diіa“. All bills and accounts in OTP were blocked after my morning appeal, so I can’t withdraw money through them. They also froze my credit history data (they don’t give loans without them). Now I’m still waiting for „Diіa“ to delete the scammers’ device,» Victoria said.
She also said that she had a meeting with the management and representatives of the OTP Bank security department in the evening. «They initiated the meeting to understand where the vulnerabilities are and fix them. They also thought about how to restrict any access to these scammers who are still in my „Diіa“. I am pleasantly surprised,» the girl said.
Meanwhile, according to her, representatives of «Diіa» write that Victoria’s words «do not correspond to reality, that they have nothing to do with the loans.»
She also published correspondence supporting «Diіa».
Meanwhile, the press service of «Diіa» commented on the situation as follows.
«No one hacked the process and no loans were issued through it.»
The attackers gained access to the victim’s BankID, which they used to apply for loans. They also used BankID to log in to Diіa, but it is impossible to transfer a copy of a digital passport or apply for a loan through Diіa without the owner and a digital signature.
«Diіa» helped to quickly identify the problem, because thanks to push notifications about loans, the girl immediately learned that scammers had taken possession of her data and were trying to get money.
The Ministry of Digital Affairs team is constantly working on even greater protection for the application and Ukrainians. Despite this, we urge Ukrainians not to share their passwords, smartphones, and bank cards with anyone.
The Ministry of Digital Affairs once again emphasizes that «Diіa» is the most secure Ukrainian state IT product. It does not store personal data, but only displays information that is already in the registers about you.
The operation of the «Diіa» application is completely based on legally established procedures and is designed so that a citizen’s digital passport cannot be used without his or her will.
We emphasize that this situation requires the intervention of cyber police to investigate the details of the crime.
We advise you to be vigilant, and we, for our part, continue to implement tools that help make this process even more reliable.»
Previously, a cyber expert explained how scammers could have accessed the Diіa account.
