The Ministry of Digital Affairs denies that the fraud that Founder and CPO of KARAKUM Soft Viktoria Alexandrova suffered from was somehow provoked by the insecurity of «Diіa»: the ministry voiced other reasons for the incident.
The Ministry of Digital Affairs denies that the fraud that Founder and CPO of KARAKUM Soft Viktoria Alexandrova suffered from was somehow provoked by the insecurity of «Diіa»: the ministry voiced other reasons for the incident.
«The attackers gained access to the victim’s BankID, which they used to apply for loans. They also used BankID to log in to Diya, but it is impossible to transfer a copy of a digital passport or apply for a loan through Diіa without the owner and a digital signature,» the Ministry of Digital Affairs noted in a comment sent to dev.ua.
According to the ministry, «Diіa» on the contrary helped to quickly identify the problem, because thanks to push notifications about loans, the victim of fraudsters immediately learned that the attackers had taken possession of her data and were trying to get money.
«The Ministry of Digital Affairs team is constantly working on even greater protection of the application and Ukrainians. Despite this, we urge Ukrainians not to share their passwords, smartphones, and bank cards with anyone. The Ministry of Digital Affairs once again emphasizes that „Diіa“ is the safest Ukrainian state IT product. It does not store personal data, but only displays information that is already in the registers about you,» the Ministry of Digital Affairs reminded.
The ministry adds that the work of the «Diіa» application is designed so that a citizen’s digital passport cannot be used without his or her will.
They also believe that Victoria Alexandrova’s situation requires the intervention of cyber police to investigate the details of the crime.
Recall that dev.ua wrote about the situation of Founder and CPO at KARAKUM Soft Victoria Alexandrova, who stated that she had become a victim of fraud. Now she is a «borrower» in a number of financial institutions and microcredit organizations, although the specialist herself did not issue any loans. In this context, the woman had a question about the state application and stated that her «Diіa» was hacked.
This situation became public and was commented on by cyber expert Konstantin Korsun, who expressed his assumptions about how attackers could hack the user’s «Diіa» and apply for loans on it.
