Mobikwik Data Breach - The Biggest KYC Data Leak

[shashankb]

unreliable how?

OTP's can be spoofed from your mobile. Infact your whole mobile number can be spoofed. It is better to get physical 2FA keys . They are currently the best for security. But not many companies provide feature to use a USB key for security. Indian Banks I donno when will incorporate this technology

There is a major flaw in telecom system which came out recently

Your OTP may not be safe as new SMS attack redirects texts to hackers

Besides all the things this new attack involves, the most interesting aspect is that the tools only need hackers to pay $16.

www.indiatoday.in

 

[bhojv74]

I've used mobiwik ages back, when they were launched. Still they have my card no issued in 2020, do they have payment gateways where I may have keyed in the card ? Below is the info they are showing:

Replaced my card no with 1234.

bank_cards": [
{
"card_number": "485498******1234",
"holder_name": null,
"other_card_details": [
"expirymonth",
"expiryyear",
"cvv2"
]
}
],

EDIT: I remember using them via FLipkart smartstore for mobile recharge & Gas booking. Darn !

 

[shashankb]

I will put a request of account deletion for these guys
Freecharge
Oxigen Wallet
Future Pay

Ironically Mobikwik runs a BugBounty Program. Online Mobile & DTH Recharge, Bill Payments, Easy Recharge

The last line reads "Thank you for helping keep MobiKwik and our users safe"

 

[Sushubh]

Won't work. They would blame RBI regulations.

 

[ch@ndlerbing]

I've used mobiwik ages back, when they were launched. Still they have my card no issued in 2020, do they have payment gateways where I may have keyed in the card ? Below is the info they are showing:

Replaced my card no with 1234.

bank_cards": [
{
"card_number": "485498******1234",
"holder_name": null,
"other_card_details": [
"expirymonth",
"expiryyear",
"cvv2"
]
}
],

The link provided is not opening. How can I check?

 

[opomiyulen]

@ch@ndlerbing open in tor browser. I guess i never used it, don't remember if i used mobikwik. My details are not there fortunately

 

[shashankb]

You should be using a Tor browser or a Tor VPN Onion from Play store. Thousands of websites get breached daily . Some of the popular ones also. Some are brought into light , others are just hidden on purpose or just dont get into the eyes of their backend. Our data will already be on the internet some way or the other.

 

[igloo]

wow. I have 0 records found.
But do have a verified mobikwik account.

 

[Aakash Malhotra]

can you guys recommend a good password manager that is free

 

[ishanjain28]

Can someone verify if CVV is also stored ?

They appear to be saving CVV.

The onion site that has all the data reports, they have expirymonth, expiryyear and cvv2.