Уровень 0 · материалов: 3
В кластер входят документы, касающиеся уязвимостей и мер защиты учетных записей на портале Госуслуг, и не входят документы о безопасности других сторонних интернет-ресурсов.
Общие признаки: уязвимости портала gosuslugi.ru, необходимость двухфакторной аутентификации (2FA), риск кражи личных данных и финансового мошенничества, безопасность государственных цифровых сервисов
Группа выше: Государственные ИТ-системы России
Смысл: The main idea is that the centralization of government and financial services under the Gosuslugi portal creates a single point of failure; if an account is compromised—especially without 2FA—attackers can commit comprehensive identity theft and financial fraud with ease.
A compromised Gosuslugi account without two-factor authentication allowed an attacker to steal personal data, forge tax documents, and open bank accounts in the victim's name.
Смысл: The text serves as a warning that the Russian government services portal (gosuslugi.ru) has a critical security flaw where an account can be deleted using only a password, without email confirmation, making two-factor authentication essential for security.
A user's Gosuslugi account was deleted using only a password, highlighting a critical security flaw and the necessity of two-factor authentication.
Смысл: The main idea is that relying on a single password for sensitive government portals is dangerous; 2FA is essential to prevent identity theft and fraudulent financial activities enabled by compromised personal data.
A user's Gosuslugi account was hijacked via a leaked password and a corrupt service center to attempt microloan fraud, highlighting the critical need for two-factor authentication.