“Avito” increased rewards to “white computer pirates” to 500 thousand rubles

Program participants can test all mobile and avito web applications, as well as any available service that operates in subdomains *.avito.ru, on the subject of errors in the code that attackers can use to obtain unauthorized access to User data, financial information important files or violate site stability.

The amount of remuneration for each vulnerability that is found depends on several factors, such as the degree of influence of vulnerability on the commercial platform, the difficulty of eliminating and the scale of the audience, which is threatened by error.

The program is carried out on the Bi.Zone Bounty platform. The head of the product of the platform, Andrei Levkin, said that an increase in remuneration “will attract more experienced independent researchers and increase the level of resource security.” In 2024, the average payment amount on the Bi.Zone platform increased by 14% to 44 thousand rubles.

The Chief of Information Security of Avito, Andrei Tsenok, said that the company “develops the protection system”, uses scanners to verify the vulnerability code and performs “manual security audits.” In 2025, Avito will increase cybersecurity costs of the service and an additional improvement of data protection systems by 50%.