The account of over 2 million ONUS users have been hijacked.

December 28, 2021 - Around 2 mins mins to read

ONUS (previously VNDC wallet) has experienced a major module attack, revealing the data of around two millions users, over 90% of whom are Vietnamese.

The account of over 2 million ONUS users have been hijacked. — *Source: RaidForum*

On December 25, the account vndcio posted on the RaidForum site, offering to sell the database of the ONUS cryptocurrency trading platform, including electronic know your customer (eKYC), photographs, videos… According to the post, about 2 million ONUS customer records were taken.

The account vndcio wrote:

“I’ve hacked into their servers and was able to dump the data.
I’ve also deleted the files on their servers, so, now they don’t even have the eKYC data anymore.
The database contains information of ~2m users (that’s all users of ONUS platform).”

When questioned about eKYC photographs and videos, this individual additionally shared various pictures showing ID card and videos of some users. According to the vndcio account, 90% of the data received originated from Vietnamese users. It is unclear what the hacker offered for the aforesaid data.

The platform reported on its official website that it had been subjected to a large-scale cyber assault. “A large-scale cyber attack damaged ONUS’s system. Through a security problem, a third party was able to illegally access and steal some of ONUS’s critical data.” ONUS made a public announcement.

The platform also stated that some customer data, including as name, email, phone number, KYC information, encrypted password, transaction history, and other encrypted information, may have been leaked.

The platform posted on their website:

“We sincerely apologize and seek for your forgiveness. This is also an opportunity for us to evaluate ourselves, modernize, and improve the system to protect the safety of our clients, particularly during the transition from VNDC to ONUS.”

The company is now collaborating with security experts to resolve the issue and improve security. On December 25, the application required users to reset their passwords in order to use the app.

ONUS is the predecessor of the VNDC wallet app. This initiative describes itself as a “digital financial investment application” established by Vietnamese people in Singapore. The app was released in the app stores in March 2020 and has 1.6 million users, the majority of whom are Vietnamese, after 18 months. Know Your Customer (KYC) verification has been completed by over 600,000 people.

Patrick

Coincu News

Market