(Not relevant, repaired) Note. How Tele2 shares access to the personal account of new subscribers
If you are a new Tele2 subscriber, then it is likely that the mobile operator, without your consent, not only shared your personal data with someone else, but also transferred the ability to manage your “personal account” to third parties.
No hacker attacks, complex hacks, etc. are needed. - everything is somewhat more banal.
Source: frame from the Tele2 ad and the cat with Y. Cried
I will try to describe in more detail so as not to (possibly) miss important details.
A year or two ago, I had 2 Tele2 SIM-cards: Voronezh and Moscow, and the Voronezh card was linked to the Moscow number through the "My Account". It is worth noting that the number binding in the Android mobile application at first worked very poorly - with the next update of the application, the attached numbers disappeared, but then it seemed to be “fixed”.
After some time, it was decided to abandon the use of the Voronezh number - just stopped paying (there was some small amount left).
I’ve got a Tele2 Moscow number and I use it infrequently, especially since I’ve stopped entering the application.
Then, for the sake of interest, I went into the "My Account" and look, some services appeared on the Voronezh number - paid Internet for 8 rubles a day and money in the account 60 rubles. Well, I think: “What are they doing?”, And quickly turned off this option. For the sake of curiosity, I ordered a detailed report on the number and from it I already realized that the number was transferred to another person, but Tele2 somehow forgot to “untie” it in the “My Account”. In fact, information about the new subscriber also became available to me: name, address of residence (address of delivery of correspondence) and of course the phone number.
I contacted the operator’s support service - outlined the situation and asked for a fix. The joyful support service operator notified that they would solve the problem in 3 days, transferred a bonus of 100 rubles (apparently for a found bug :)) and left the ticket number. A month passed - nothing was fixed and no one contacted me again.
As you can see, repeating the procedure of hijacking the control of someone else’s Tele2 number is easy, the main thing is to be able to wait :). So do not be surprised if your phone began to actively share gigabytes with unfamiliar numbers without your knowledge.
PS At 18:50 MSK an SMS message came: "Access to your personal account for number 7952 is stopped." Habr is working (I’ve been waiting a month before), but the annoyance is that access from the application to someone else’s account also continues to work, despite SMS :) Access via the browser has ceased.
PPS A couple of weeks after the publication of the article, access through the application was closed.
No hacker attacks, complex hacks, etc. are needed. - everything is somewhat more banal.
Source: frame from the Tele2 ad and the cat with Y. Cried
I will try to describe in more detail so as not to (possibly) miss important details.
A year or two ago, I had 2 Tele2 SIM-cards: Voronezh and Moscow, and the Voronezh card was linked to the Moscow number through the "My Account". It is worth noting that the number binding in the Android mobile application at first worked very poorly - with the next update of the application, the attached numbers disappeared, but then it seemed to be “fixed”.
After some time, it was decided to abandon the use of the Voronezh number - just stopped paying (there was some small amount left).
I’ve got a Tele2 Moscow number and I use it infrequently, especially since I’ve stopped entering the application.
Then, for the sake of interest, I went into the "My Account" and look, some services appeared on the Voronezh number - paid Internet for 8 rubles a day and money in the account 60 rubles. Well, I think: “What are they doing?”, And quickly turned off this option. For the sake of curiosity, I ordered a detailed report on the number and from it I already realized that the number was transferred to another person, but Tele2 somehow forgot to “untie” it in the “My Account”. In fact, information about the new subscriber also became available to me: name, address of residence (address of delivery of correspondence) and of course the phone number.
I contacted the operator’s support service - outlined the situation and asked for a fix. The joyful support service operator notified that they would solve the problem in 3 days, transferred a bonus of 100 rubles (apparently for a found bug :)) and left the ticket number. A month passed - nothing was fixed and no one contacted me again.
As you can see, repeating the procedure of hijacking the control of someone else’s Tele2 number is easy, the main thing is to be able to wait :). So do not be surprised if your phone began to actively share gigabytes with unfamiliar numbers without your knowledge.
PS At 18:50 MSK an SMS message came: "Access to your personal account for number 7952 is stopped." Habr is working (I’ve been waiting a month before), but the annoyance is that access from the application to someone else’s account also continues to work, despite SMS :) Access via the browser has ceased.
PPS A couple of weeks after the publication of the article, access through the application was closed.
All Articles