https://singaporeuncensored.com/touch-n-go-...US9LOwGMBOTspOo


Public Service Announcement

The incident happened yesterday afternoon. She realised that someone has taken control of her Touch ‘N Go account and started making transactions out of her account.

A total of 12 transactions were made. Within one hour, RM3000 was transferred out of her Touch ‘N Go account.



This post has been edited by jvcpcv55: Mar 7 2020, 03:53 PM

how the hack works hah?

It hacks our account and loads money into our account, then transfer to the hacker? Easy to trace only ma if rike that, no?

Hack n pay at tesco how to trace?

Lol never trust reverse engineerable apps when dealing with real money.

Touch n Go app tu, see from screenshot also can see it's vulnerable to such attacks. Muh Flutter Framework

loaded RM 3000

time place face and cctv? but ok, the hacker can spend at pasar malam too

just checked my app says it has guaranteed money back due to theft

Why it's Singaporean though?

kek, knew this kind of shit would happen

happened in JB,


ROAD.sg give Public Service Announcement

got cctv

dono how to set limit ler tu....salah tng pula....

Can makeup changed face.

i had my acc inaccessible back in jan...someone login mine...
when i open the app to login, the otp thing or password thing not working right away.. say sth like had tried too many times...

cause TnG credit card info save in central/cloud, once they have poor encrypt and simple user credential, u just need to username and password (using my phone and login with your detail), others information can retrieve already.

malaysia 34m populations only .... so easy RIGHT ?

Related to the cc data leak from bank few days ago?

ayam no IT expert, but I thought tng link to the fon number. Izzit now this linkage that is not secure, meaning other number fon also can login/hack our account now?

This is cc info leak, another different problem rike?

This post has been edited by Nanti Sekejap: Mar 7 2020, 04:15 PM

I wonder why online banks or even these apps which deals with money don't even have simple 2FA.

Everytime I open maybank/cimb app, i feel so vulnerable.

Nowadays also sim jack is quiet popular method to break in someone's account. Just ask victim the code in the SMS or jack the sim, you're in.

dont know how it work.... luckily acc was locked for few days due to too many fail attempt to login...and days ltr i log back in.

Surely ke phishing somewhere a long they line. Simply gave out info.

Me old skool still using smart tits

How about shopee? Secure or not?

lucky i haven add bank card to it..
still no trust any e wallet

You're just reading title and comments without reading content!???????

can set limit on tng? how

A bit odd since it is not auto reload because it is 200 and 500 transferred and her credit card don't have TAC send to her phone number for reload? Likely she shared her details with someone else or this is a fraud case.

i never use tie any card on my phone transaction , know this will happen some time

she say otp also hijacked

When you saved credit card info in touch and go ewallet,,, it reload without TAC.


Those money was transferred out from ewallet....

? I thought it's ReactNative?

Topkek even Setel wanted my card info. I told them to fuck off and uninstalled the app. Legit faster to just plug my card into the terminal.

But her phone still fine wor and only cannot use the TNG app.
That's why I said she must have given someone her banking details or credit card pin until can change phone TAC number

Can reload without TAC? How come mine cannot?

sudah banyak kali cakap boost >all

but /k dont want to listen.... always said the other one bettrr.....

cos u is debitcard, bumdaadass.wav

Same same. Million $ company, only invest in hybrid framework for "fast delivery". But i don't think TS article is about flawed codebase, it's more like sim jacking.

I use reload pin to topup.

Never use bank card.

not link to phone, cause i install my TNG apps on my phone than help my mum, dad and niece to apply that rm 30 credit
that tng not even required many phone hardware permission.

But I remembered when I legister, I input fon nember woh

u have to understand invest 1m to develop, Director take 400k, ceo take 200k, sub to CTO take 100k, sub to Project Manager take 50k, team lead take 30k than out sources it out standard SOP.

if stupid，better dont use........ya.....

yes u need to input number as USERname, when u log out, u can change others USERname (phone number) to login again, worst is 6 digit simple password.

So better don’t link the credit or debit card to the touch and go?

Guys.

I have a burst of continuous toll charges at PJS5 this afternoon while my cars are still at home. Now my credits all finished.

Any advice? Any TnG personnel here can contact me?

Why you not call tng

+1

now, which fellas that die die defend tng on last thread just because of the free rm30 from gomen?

just use prepaid debit card like bigpay and link it to the ewallet/lazada/shopee acc

just spare some $ that u feel comfortable to lose in case your acc kana compromised

scary isn't it?

lazada also the same. once you saved the cc/dc and bind it to the account

IF

someone happened to use it / or hacked it , it is a free shopping spree weeee...

my maybank debit card is Kosong one
i need money than transfer than atm/pay/topup.

E wallet with 3K?

how about other app? like grabpay? boost? alipay?

true story

one of my prepaid debit card kana compromised last year.

that mofo use it to buy mobile legend subscription or something. amount not much lah under rm50
charged under google IIRC.

funny thing is that card is solely used for online shopping. no tac sent to my hp either. lucky I seldom keep much money on that card.

i regularly checked my prepaid debit card online so I was surprised to see the amount charged . as usual made a report to back yada yada yada it takes a while before the bank credited the $ back to me. and of course they cancel the cc and resend it

lesson learn: nothing is secure in this world.

This post has been edited by JimbeamofNRT: Mar 7 2020, 07:50 PM

yup, i kena paypal rm 20 monthly subscriptions thing, from there onward, 1 empty card for online purposes only.

continuously top lah from the cc

Protip: If you topup at watsons you can get the full value. Other places and even the atm kena surcharge

Use a prepaid credit card. Load money if need to use it. If anything, the hacker can’t reload more that what’s inside the card.

.

This post has been edited by idoblu: Mar 7 2020, 08:03 PM

Normal. It's delayed charge.

Rm3K touch n go?

This case mcm highly suspicious,
Macam scam attempt

u read but do u understand ?

Boost no more cashback like shit

Eh Touch 'n Go eWallet replied this Apple dy. And said they're gonna resolve it with MBG. Pretty quick response from them if you ask me. That shows them actively trying to solve user's issues. Very impressive ah?