On May 13, an account named Ox1337xO made many Vietnamese bewildered when selling a 17GB data package of thousands of network users for about $9,000.
According to this account’s share, the data includes two-sided photos of citizenship, citizen identification, authentic selfies, addresses, phone numbers and emails of thousands of people.
Regarding this, on the morning of May 17, Lieutenant General To An Xo, Chief of the Office of the Ministry of Public Security, said that the Cyber Security Department and related units had checked and verified information about thousands of ID cards believed to be of Vietnamese citizens for sale online.
According to Mr. Xo, the images that have been circulated show that the samples for sale are the old ID card, not the new chip ID card.
“It is necessary to check, verify and clarify where thousands of IDs have been exposed to handle”, on Zingnew.vn Quoting General Xo as saying and saying that for identification documents, many places can ask people to provide them, such as banks, airlines or some business fields that also require ID cards.
After the incident, the National Cyber Security Monitoring Center (NCSC) has also issued an urgent warning to users.
Through testing, NCSC assessed, with a data structure of up to 10,000 people for sale, it can be seen that this data comes from users registering to use services that require KYC information (including name, address, phone number, double-sided photo of ID card/CCCD) such as: online money lending service, virtual money account service, etc.
Although being investigated by the authorities, according to the NCSC, this information can still be used for fraud, advertising purposes, etc.
The NCSC recommends that each individual in order not to be taken advantage of by bad actors or become a victim of phishing attacks should be equipped with good knowledge to avoid possible fraudulent situations.
Need to anticipate possible scam scenarios for you and your loved ones, notify the nearest authorities when there are suspicious calls and emails sent to you and yourself.
Ensure the safety of online accounts (such as bank accounts, e-wallets, email, Facebook, especially with accounts with online payment function, only open these features when needed) ).
Phone numbers associated with bank accounts and e-wallets when not in use need to be notified and updated to the service provider.
In particular, only the services of reputable organizations should be used, which have been trusted in the domestic market. Avoid providing personal information, KYC (including full name, address, phone number, double-sided photo of ID/CCCD) for services of organizations that have not been confirmed, clearly assessed credit. such as loan application systems, virtual currency.