Уровень 0 · материалов: 4
В кластер входят документы, описывающие конкретные технические уязвимости и риски безопасности в сервисе Yandex.Money.
Общие признаки: Yandex.Money, безопасность, уязвимости, утечка данных, восстановление пароля
Группа выше: Взломы и инциденты конкретных сервисов
Смысл: The text describes the discovery and reporting of a security vulnerability in Yandex Money that allowed unauthorized payment password recovery, emphasizing the importance of security reporting and the risk of scams.
The author discovered a simple method to recover Yandex Money payment passwords via an online guide and reported it to Yandex, who fixed the flaw without replying.
Смысл: The text warns about a critical security vulnerability in Yandex.Money's password recovery system, where linking a mobile phone via a compromised email account could lead to total loss of funds.
The author critiques Yandex.Money's 'amnesty' feature for allowing potential hackers to steal funds if they gain access to a user's email.
Смысл: The text reports a data leak vulnerability in Yandex.Money's merchant statistics tool that allowed stores to see global payment data, and the company's subsequent denial of widespread impact.
A security flaw in Yandex.Money briefly allowed merchants to view sensitive payment data for all users before being patched.
Смысл: The text warns payment terminal operators about a hardware-level vulnerability in CashCode bill validators that allows scammers to simulate the insertion of 5,000-ruble notes to steal funds via Yandex.Money.
Fraudsters are exploiting CashCode bill validators in outdoor terminals to fake 5,000-ruble deposits to Yandex.Money wallets, primarily at night.