Olha que beleza que são essas empresas que pedem montanhas de dados pessoais nossos.
Atacantes se passaram por autoridades e solicitaram dados e documentos pessoais de alguns clientes da Revolut. Eles cairam na conversa e enviaram dados que incluem: foto do passaporte, selfie da hora do cadastro, endereço, telefone, email, nome completo, histórico de saques e de transferências, etc…
Depois eles perceberam que o pedido não era real, já era tarde demais.
E querem que a gente entregue toda a nossa vida para essas empresas.
https://x.com/intcyberdigest/status/2098704229913202728?s=46 ‼️ BREAKING: Revolut handed over customers’ passport copies, verification selfies and full transaction histories to a malicious actor.
The actor sent lawful government information-demand emails using a genuine government domain that passed domain authentication.
Revolut later concluded they were not authentic.
Affected customers were notified on Friday. What may have been disclosed ranges from name, date of birth and home address to account statements, withdrawal records and complete Bitcoin transaction history.
The company says it has alerted the agency to the unauthorised mailbox on its domain, blocked the address and begun notifying regulators.
It has not named the agency, explained how someone obtained a mailbox there, or given a number of affected customers.
ZachXBT, who circulated the notices, believes the incident was limited in size and aimed at high-net-worth users.
