A Vinted kitty full of sales made that disappears overnight. This is the unpleasant experience lived by many users of the Lithuanian second-hand sales platform in recent days. According to information from Parisianseveral hundred people would be affected by this elaborate trick.
Vinted’s kitty (or “wallet”) normally allows members to securely collect the fruit of their sales and be able to buy with this same jackpot. If they wish, users can also transfer the amount of their kitty to their bank account.
They stole up to 800 euros
Cybercriminals have therefore not carried out “mass” hacking, but are mainly concentrating on very large kitties, sometimes with more than 800 euros raised on a single kitty. And piracy is not concentrated only in France, where Vinted has a large part of its clientele, but also in Spain or Italy.
However, in order to divert these numerous jackpots across Europe, the hackers would not have resorted directly to Vinted according to the platform’s statements on Parisian. The connection information used, such as usernames or passwords, would have been obtained thanks to data consulted during a previous hack on the Internet.
However, some users have received text messages, emails or calls informing them that a change was taking place in their account contact details. But thinking of a scam or phishing, many did not react. Others could not even notice the scam in progress as the hackers directly changed the RIB associated with the account, a move that does not require any approval via email or SMS, in order to recover the money later.
blocked accounts
To prevent the hacked users from reacting in turn, the cybercriminals also managed to get Vinted to lock their account by posting pornographic content on the account.
In addition to the pots, the hackers have also managed to recover the bank details of some members. According to screenshots provided by the victims to the Parisianthe stolen money would have been sent to Germany, Ireland or Luxembourg.
Vinted now displays an unusual message when users try to redeem their kitty.
However, the Lithuanian platform specifies at Parisian that the people who have been victims of this hack will be compensated in case of loss of money in their wallet.
Source: BFM TV
