Thread: how scammers hack VKontakte pages

Recently, a thread about the hacking of the VKontakte page appeared on Twitter. In it, the author told a real story, where he described in detail the actions of scammers, the possible consequences and methods of protection.

The wife was hacked into VK. Catch a thread about the next level of fraud that can rob you of money, data and sleep, even if you think you are not a sucker. I'll tell you how uncles work and what you need to do right now to avoid getting caught. @zombak Dmitry, help spread 👋🏻

- Creation Pact (@CreationPact) January 7, 2020

Act 1 is a classic. Friends began to write, to clarify whether we really need money. It turned out that the wife's VKontakte had been hacked. The wife dropped and changed the VKontakte password, but then there was a surprise: when you log into your account, the page crashes and logs out steadily after 5-10 seconds.

- Creation Pact (@CreationPact) January 7, 2020

Obviously, the fraudster connects some kind of bot to the page, which breaks all sessions except the fraudulent one. To stop the mailing orgy, we asked friends to report spam. After 20 minutes, the page was blocked and we exhaled. In vain.

instagram viewer

- Creation Pact (@CreationPact) January 7, 2020

Act 2 - "Nezhdanchik". Second wave of messages from friends. Now a person writes to my friends from an unknown page, says that he found my wife's passport (attaches a photo) and asks where she works to supposedly bring the found passport there.

- Creation Pact (@CreationPact) January 7, 2020

After some time, this friend writes to me in a personal email, nervously asking where his wife works, giving several confused explanations why he needs it. Of course he doesn't get an answer. pic.twitter.com/TY1yA1EkAC

- Creation Pact (@CreationPact) January 7, 2020

Yeah, so now he is trying to apply for a micro loan by sending a photo of his passport and indicating the personal data of his wife. Here we tensed. The likelihood that without confirmation of identity, something will be approved - of course the minimum, but do not count on the decency of these offices in fact.

- Creation Pact (@CreationPact) January 7, 2020

Have consulted. They called the police, wrote a statement about the attempted fraud. If suddenly the loan comes up, we will have a basis for challenging it in court. And they sent out a dozen letters to the loan offices, saying that you shouldn't give loans to your wife. Is it time to calm down? Nope.

- Creation Pact (@CreationPact) January 7, 2020

Act 3 - "Kindness and Dementia". In the course of all the fuss, an acquaintance called quickly. I clarified if everything was ok and after a few confused words hung up. After a while he writes to me. He says he got caught and transferred the money. Sit down, if you're standing, I'll write how much ...

- Creation Pact (@CreationPact) January 7, 2020

Twenty four thousand!!! How is it? And I thought of calling only after what happened, realized that I had flown by, and wrote to me. I fell for the classic legend about the burning term of the loan. And after everything was revealed, he continued to communicate with this scammer.

- Creation Pact (@CreationPact) January 7, 2020

The fraudster convinced him that he did not expect that someone would send so much money, he says - send another 6 thousand, since the minimum withdrawal amount from his wallet is 30 thousand - and I will return the money to you. Strongly?)) Our friend, thank God, did not fall for this trick. And thanks for that.

- Creation Pact (@CreationPact) January 7, 2020

In general, hacking today is not just a test of friends for suckers. They read correspondence (which is already disgusting) to imbue with style; looking for documents and various intimacy in photographs for blackmail. pic.twitter.com/NVTWmXfi6x

- Creation Pact (@CreationPact) January 7, 2020

Any user who does not use two-factor authentication. Although even this does not guarantee complete safety.

Well, now about the holes that we have left, and you will read it right now and will not go crazy. 1) The main rule of cyber hygiene in 2020. Two-factor authentication - EVERYWHERE! Especially in the mail, where all accounts are linked. Do you remember? Activate if not already. Go ahead

- Creation Pact (@CreationPact) January 7, 2020

2) We do not send any sex and documents to VKontakte. Only cart chats (better secret). And even if you think that you did not send any docks, then open the chat with the head of the group from 2013 and your passport will most likely be there. Seriously - go clean everything.

- Creation Pact (@CreationPact) January 7, 2020

3) Once again about sex. If a scammer finds your nude photo, you may even hear his loud cry of glee from another part of the world. According to the stories of friends, they extort 300k for such photos. And if you are also famous ...

- Creation Pact (@CreationPact) January 7, 2020

4) Close the list of your VKontakte friends altogether, or leave it only for friends. I never attached importance to this item of privacy, until a fellow fraudster started sending my wife's passport to my friends.

- Creation Pact (@CreationPact) January 7, 2020

5) More about two-factor authentication. Remember that this coin may turn the other way. First, turn off your phone's lock screen notifications. If the phone is stolen, thieves will ask for an SMS code and without entering a password, they will open all your social networks, mails, banks.

- Creation Pact (@CreationPact) January 7, 2020

If the phone is stolen, we immediately call the operator and block the sim card. Now put the pin code on your SIM card so that the thief doesn't move it to another body for 2-factor authentication. although the pin can be bypassed, it will save you time and protect you from untrained thieves.

- Creation Pact (@CreationPact) January 7, 2020

6) If you are very plausibly asked to transfer money - call you, Lord. Despite any persuasion. Well, write to kraynyak in another messenger. In my mind there were cases when a girl sent Money to a hacked friend, although they were in the same room!

- Creation Pact (@CreationPact) January 7, 2020

7) Do not send money to cards with an unknown name, or even worse, to electronic wallets. This should arouse maximum suspicion.

- Creation Pact (@CreationPact) January 7, 2020