4 ms·
It irritates me to read that people have lost their pension. Surely this should read, the pension fund has lost their pension due to "it safely breach"? If a ba
by seb1204 2y ago
It irritates me to read that people have lost their pension. Surely this should read, the pension fund has lost their pension due to "it safely breach"?
If a bank gets robbed they don't steal my money but the banks right?
- Khaine 2y agoInformation on the attack is scarce, but it sounds like attackers obtained credentials from prior breaches and used them against super funds. It is shameful that many of these funds have not yet implemented MFA in this day and age, but it's not like the actual fund got compromised. Obviously, information at the moment is very light so this understanding may change, but this is the current position.
- yen223 2y agoConvincing and training old retirees to use 2FA is not something I will wish on my worst enemy.
- rwmj 2y agoThe way it's commonly implemented - through SMS - isn't secure anyway. It's relatively easy to persuade an overworked employee at the phone company to issue a new SIM card.
- goatsi 2y agoHaving to call/visit and social engineer an employee is an order of magnitude more work than just logging in with stolen credentials, which can be entirely automated. SMS 2FA is valuable when it can prevent credential stuffing attacks. It's a vulnerability when it can be used to reset passwords and recover accounts.
- Gigachad 2y agoI don’t think this is as true as it once was. These days this stuff is all handled by an automated system that makes you prove your identity / ownership of the number. And support staff likely aren’t given access to override this.
- Gigachad 2y agoThe article didn’t seem to explain how the money was taken. I’m a member of one of the listed affected super funds and all my money is still there. Most plausible explanation seems to be phishing and scams rather than a technical hack.
- creata 2y agoAn ABC (Australian Broadcasting Corporation) article says credential stuffing. https://www.abc.net.au/news/2025-04-04/drt-how-superfunds-were-hacked/105138170 https://www.abc.net.au/news/2025-04-04/drt-how-superfunds-we...
- ta1243 2y agoObligitary Mitchell and Webb sketch https://www.youtube.com/watch?v=CS9ptA3Ya9E https://www.youtube.com/watch?v=CS9ptA3Ya9E
- lenerdenator 2y agoThey've effectively lost their pension, have they not? The money's gone, and the people that the retirees entrusted with the money, lost it.