Welcome Guest ( Log In | Register )

Bump Topic Add Reply RSS Feed
90 Pages « < 6 7 8 9 10 > » Bottom

Outline · [ Standard ] · Linear+

Chat CIMB kena hack?

views
     
annoymous1234
post Dec 17 2018, 12:37 AM

Look at all my stars!!
*******
Senior Member
7,617 posts

Joined: Mar 2009
so is it safe to login now to change password?
teehk_tee
post Dec 17 2018, 12:37 AM

ไม่เป็นไร
*******
Senior Member
5,363 posts

Joined: Apr 2005
From: กรุงเทพมหานคร BKK
QUOTE(maxera @ Dec 17 2018, 12:36 AM)
Actually you need to enter your password and then enter any alphabets and numbers after your password. You can login as usual. That's fcked up.
*
WTF?

THATS FKED UP
Oblah
post Dec 17 2018, 12:37 AM

Getting Started
**
Junior Member
51 posts

Joined: Dec 2015
QUOTE(briantwj @ Dec 17 2018, 12:33 AM)
They probably patched it. U can try it on ur own account. Mcm not working dy. Lul
*
Would be very good if they did.
Amanz is being VERY irresponsible with their Twitter and page post.
Imagine the shitshow if the patch came much later.
victor_hoh
post Dec 17 2018, 12:37 AM

pump my muscles
******
Senior Member
1,191 posts

Joined: Nov 2004
From: Ipoh, now PJ
probably hashing problem. causing abnormally frequent collision.

This post has been edited by victor_hoh: Dec 17 2018, 12:38 AM
str4n93r
post Dec 17 2018, 12:37 AM

Getting Started
**
Junior Member
94 posts

Joined: Jul 2012
From: Batcave
My sis baru kena semalam. Demn
Krv23490
post Dec 17 2018, 12:38 AM

Look at all my stars!!
*******
Senior Member
2,175 posts

Joined: Mar 2016
QUOTE(ahhann @ Dec 17 2018, 12:33 AM)
already have video circulating in WhatsApp with the exact attack method in play dee ...
*
Share bro
Ee_
post Dec 17 2018, 12:38 AM

Mehh
*****
Senior Member
856 posts

Joined: Sep 2004
From: Aurora
QUOTE(maxera @ Dec 17 2018, 12:36 AM)
Actually you need to enter your password and then enter any alphabets and numbers after your password. You can login as usual. That's fcked up.
*
That means you still need to know the password, right? The captcha might help from brute force attack though. Damn, what's really going on
Neo8663
post Dec 17 2018, 12:39 AM

Regular
******
Senior Member
1,244 posts

Joined: Jul 2005
QUOTE(buraqdunia @ Dec 17 2018, 12:15 AM)
maintenance.
*
ya, forgot they do maintenance night time doh.gif
stupiak07
post Dec 17 2018, 12:39 AM

Casual
***
Junior Member
397 posts

Joined: Oct 2007
From: broken heart land, single forever~
They should just shut the server down as it affected too many user.

This post has been edited by stupiak07: Dec 17 2018, 12:40 AM
ahhann
post Dec 17 2018, 12:40 AM

Lim Peh
****
Senior Member
545 posts

Joined: Mar 2006
From: The Weirdo River O_o
not going to share the video for the obvious reason. later all /k use that method to go attack pula hahahahhahah ~ wait la, i'm sure your whatsapp will ring later.
maxpudding
post Dec 17 2018, 12:40 AM

Getting Started
**
Junior Member
164 posts

Joined: Mar 2007
QUOTE(Jibbynomo @ Dec 17 2018, 12:34 AM)
So um.. Is it safe to login and change password now?

I have a PayPal acc linked to my account. Should i keep it linked or unlink it?? If it stays link would paypal block new account trying to link to my account? I dont get this
*
unlink first

can always link later
maxpudding
post Dec 17 2018, 12:41 AM

Getting Started
**
Junior Member
164 posts

Joined: Mar 2007
QUOTE(Neo8663 @ Dec 17 2018, 12:39 AM)
ya, forgot they do maintenance night time  doh.gif
*
can change now

cimb maintenance until 12.20
briantwj
post Dec 17 2018, 12:41 AM

Pierluigi Collina
*******
Senior Member
3,968 posts

Joined: Sep 2012
Removed

This post has been edited by briantwj: Dec 17 2018, 12:43 AM
HolySatan
post Dec 17 2018, 12:41 AM

Regular
******
Senior Member
1,116 posts

Joined: Dec 2009
user posted image

dah kantoi since morning
Mr. Najib Razak
post Dec 17 2018, 12:42 AM

Casual
***
Junior Member
321 posts

Joined: Jun 2016
QUOTE(ahhann @ Dec 17 2018, 12:33 AM)
already have video circulating in WhatsApp with the exact attack method in play dee ...
*
mohon share
thewan
post Dec 17 2018, 12:42 AM

Getting Started
**
Junior Member
156 posts

Joined: Apr 2009
QUOTE(jimmyktp @ Dec 16 2018, 11:12 PM)
It is super easy.

Coupled with installing Cerberus app on an unsuspecting phone, I can even read or send sms from my computer/phone

Note: Cerberus is a legitimate app but could be easily misused.
Let's take this as a scenario:

1. You went overseas for holiday bringing your phone with you. Someone knew you are not in the country.

2. Scammer goes to police station and make a report saying lost IC (pretending as you).

3. Using the police report, goes to make a temporary IC.

4. Using temp IC and police report, makes a report with telco to get them reissued a replacement sim card.

5. You realised your phone cannot use while you were in overseas. You didn't bother because you think you will sort it out when u come home.

6. Scammer can get banks to reissue a new CC, or if they already have your username and password, you GG because now any new sms from banks to you will be sent to the replacement sim card which is being held by the scammer.

7. See how powerful if someone gets your Phone Number?? A chain is only as strong as the weakest link. The phone number is the weakest link!

*Happened to my friend's dad* A big foreign bank in Malaysia who is famous with issuing CCs wanted to sue my friend's dad* The suit was thrown out eventually.
*
So much work. SMS can be redirected to another number. No need IC, no need Sim Card with target number. No need visit Police or telco, just sit at home. Just redirect all the bank sms to a hacker controlled number. Old vulnerability is old, please get educated dear Malaysians, and tell your banks, No more sms based authentication. Bank Negara should step in and fine or revoke licenses of banks that do not protect their customers money adequately.

Start here: https://arstechnica.com/information-technol...uting-protocol/ and then look up more on SS7 and SMS and how it all works. Then you will understand, no more SMS please.

This post has been edited by thewan: Dec 17 2018, 12:43 AM
Sichiri
post Dec 17 2018, 12:42 AM

Regular
******
Senior Member
1,192 posts

Joined: Jan 2003
From: Kepong, Kuala Lumpur, Malaysia.
QUOTE(briantwj @ Dec 17 2018, 12:41 AM)
Just saw the video. And it is legit. So guys. Please keep ur username safe to urself.
*
Just username is enough to log in?
Jibbynomo
post Dec 17 2018, 12:43 AM

New Member
*
Newbie
4 posts

Joined: May 2018
QUOTE(maxpudding @ Dec 17 2018, 12:40 AM)
unlink first

can always link later
*
Wouldn't it be easier for abuser to link acc to PayPal then? Like dont PayPal allow bank account link to only one PP acc? Or am i wrong (u can link bank acc to numerous PP acc)?
Duckies
post Dec 17 2018, 12:43 AM

Rubber Ducky
*******
Senior Member
9,796 posts

Joined: Jun 2008
From: Rubber Duck Pond
QUOTE(HolySatan @ Dec 17 2018, 12:41 AM)
user posted image

dah kantoi since morning
*
Just tested. This is so fucking legit man. Pls change ur password guys.
teehk_tee
post Dec 17 2018, 12:44 AM

ไม่เป็นไร
*******
Senior Member
5,363 posts

Joined: Apr 2005
From: กรุงเทพมหานคร BKK
Fark.. This is legit..
fark im changing my pw now.
« Next Oldest · Kopitiam · Next Newest »
 

90 Pages « < 6 7 8 9 10 > » Top
Add ReplyOptions
 

Change to:
| Lo-Fi Version
 0.0234sec    0.66    6 queries    GZIP Disabled
Time is now: 12th December 2025 - 09:25 AM
All Rights Reserved © 2002- 2025 Vijandren Ramadass (~unite against racism~)
Removal Request
Powered by Invision Power Board © 2025  IPS, Inc.