Language-teaching app Duolingo has fallen victim to the theft of a package containing information from more than two million people. the worst thing is A package containing user data went up for sale on an illegal hacking forum.
The report was produced by the website Bleeping Computer, a page specializing in technology and cybersecurity news.
Duolingo was targeted by hackers via an API code that allows an application to extract files within one software and use them in another.
According to the report, the attack would take place at the beginning of 2023 and 2.6 million people had information. It was already offered for $1,500 on a cybercrime forum.
However, the post was removed from the illegal site. Now the data package extracted from Duolingo has been quoted again, but The cost is much lower: two dollars.
At the time of the attack, Duolingo stated that the database only had publicly available information: usernames selected in the application.
However, it turned out that There will also be private information such as email addressesInformation that cannot be seen anywhere in the application and cannot be referenced by other users.
The biggest risk faced by users whose information is in the data package in question is the type of fraud known as Phishing.
This method is based on sending emails. it seems to come from organizations such as banks or companies that offer different services.
According to a special page called Panda Security, senders pretend to be companies in an attempt to trick users. The communications they send contain links similar to those used by real companies. They also often ask for different data or even keys.
The expert portal gives some recommendations to avoid becoming a victim of such scams.
First, be suspicious if they ask you for personal information via e-mail. This will trigger alerts. Also andIt’s important to watch out for typos. discrepancies and the sender’s email address.
Do not click on suspicious links in the email. If you do this, Verify that the lock icon appears in the upper left corner. This way you can verify that it is a secure site.
LATEST NEWS FROM THE EDITOR
Source: Exame
