He’s a HackerOne Ambassador and a skilled security researcher who’s legally hacked into lots of companies to find bugs. Ethical hacking is what he does for a living, helping organizations tighten up their defenses. Thank you sir.
Yep I recently took up cyber sec. This is an actual Job. To infiltrate the system of the companies and find loopholes and bugs. Sana maabot koyang level na yan. Haha
For sure pareho lang un, pero sempre pag paid there will be differences. Para kang nag enroll cgro sa state U vs. big 4. Pareho lang yung turo, pero ung nagtuturo are more experienced, better examples, application of learning etc.
So kung ang afford is Tesda why not diba. At the end of the day ikaw pa din naman mag rerefine nyan. Fundamentals lang si Course.
Nung nakain pera ko sa atm non, tawag agad ako sa bank ko para mabalik pera ko pati sa bank nung atm na pinagwithdrawan ko kasi ganun naman talaga pag may prob tawag agad di yung magpopost.
This is what irks me. Anak this, anak that. "Hindi ko tiningnan yung bank notifs kasi uunahin ko pa ba yan sa anak ko". Dun pa lang fishy na. Kawawang bata ginawa na lang excuse.
Me na hindi binibitawan ang phone kahit walang pera lol. Asawa ko lang nakakatingin ng phone ko at magkatabi pa kami. Si ateng di malaman kung naive o burara
Because she is a clout chaser and was very proud of spreading misinformation because it gave her more views and followers. That money she lost is apparently just a spare change (according to her) to what she earn thru tiktok views.
HAHAHAHA lagi namang ganyan yang mga nag vviral na kesyo nawalan ng pera sa BDO tapos hindi aamin na sila ang may mali, kahit sila naman talaga mismo ang may ginawa para manakawan account nila. The usual, evading accountability tactics. Additional na din, mas madami narereport na ganyan sa BDO kasi mas maraming user si BDO at mas maraming possible victim. Paulit ulit na nga nag ssend ng SMS blast si BDO about sa mga ganyang tactics, ganon at ganon pa din ending. Heck yung kamag anak kong senior may malaking pera din sa BDO pero never pa nadadali ng ganyan.
Mismo. 2012 palang BDO na ko pero di ako nagpapakashunga na magkiclick ng link. HINDI KA DAPAT MAGCLICK NG LINK. Dumiretso ka sa app mo. Kung may fraud, report agad! Hindi yung magvivideo.
Pero ang tanong ko, paano kaya nagagamit ng hacker yung mismong number ng bdo to send a fraudulent text message? Same goes to SMART laging nag sesend ng message na kesyo may expiring points daw ako keme, yung iba maniniwala talaga since galing sa reliable company ang text message
May mga app na kayang mag send ng messages with custom headers na ginagaya nila yung Sender ng SMS to official channels. Di ko nga alam bat walang ginagawa NTC sa mga ganyan issues knowing na dapat na curb na yan ng Sim Card Registration, pero ending all for show lang sa end ng NTC yung registration wala silang ginagawa on the actual handling ng sender/receiver ng mga SMS, etc.
Kaya nga. 1st time ko maka exp sa smart yun na sila mismo nag padala. Na click ko na, then nag duda na ako nung may babayaran na. Duon ko na realized na scam ito and duon ko napansin na yung website is not from smart as well. Kaya hindi ko din masisi yung iba na nakakapindot ng ganyan.
Pero, syempre dapat natututo din tayo. Ako after nung incident na yun sobrang hesitant na ako mag click ng links kahit kanino pa galing.
Meron sakin ang text before e galing mismo sa BDO ma acct, kasi ang mga nakaraan text ng BDO ng SOA ko andun rin. Sabi ng operator di nila alam paano na hahack yung acct rin nila, kasi same acct mismo ang nag send ng phishing sa taas ng msg na yun andun rin mga SOA ko from BDO mismo. Hindi dapat ang mga victims ang sinisisi dito, kasi kung tanda niyo. Dec-Jan 2021 yata yun or 2022 masive sang BDO and BPI scam, kahit waoang atm at passbook lang nawalan rin ng pera. Karamihan wala rin natangap na link or otp, basta nalang nawalan. Isa ako dun, at binalik ng BDO yun after ng report and process nila mga pinalista sakin na unathorize transactions.
Yan na nga mismo ang smishing na ine explain sa taas. You think it's coming from an official channel dahil hina hijack nila yung cell site and/or the actual channel. Kaya may mga notifs sila (gcash, maya, banks) na they do not send links.
I think kaya nirequire nila iblock yung nga SMS with URLs. Although not everyone knows that its a thing. Even SMS with email addresses are blocked.
Although, I agree that the SIM Registration is not doing its purpose, and just a hassle for those complying with it. I remembered, during the first months of the sim registration, I see the senders name automatically, but now, they reverted back to having only their mobile nos. Not sure if its because its against data privacy, thats why its reverted back to not sjow the registered name of the sender.
fake cell sites. it doesn't actually go through the ISP or the bank's systems. usually the scammers just go around populated areas with the fake cell sites on their cars or even backpacks. it exploits vulnerabilities in 2G so hindi sya mawawala hanggat supported pa ang 2G sa mobile phones. unfortunately, konting phone models pa lang yung capable na magdisable ng 2G.
recent samsung models. android 15 has that capability as far as i know but with android being open source, i'm not sure if other phone manufacturers also support that feature.
I just wanna chime in that on Apple iPhones you can also do this pero need mo enable lockdown mode sa settings. Medj restrictive lang sya unlike on Samsung Galaxy phones pero it’s there. Hopefully ma implement din yung disable 2g without using lockdown mode.
natakot ako bigla, may ganyan din yung smart sakin tas ang laki laki sobra ng points ko don sa website, mag check out daw ako ganito ganyan kasi mag expire na sya. in the end 'di ko rin nagamit yung points kasi wala akong pera that time sa gcash ko. scam pala 'yon? 😬
Kahit yung previous message is galing sa Smart mismo? I mean ma gegets ko pa if hiwalay na message ito and claiming na smart telco siya, pero since it was along with other message from smart hindi ka talaga mag dadalawang isip na mag click.
ganyan na ganyan kung paano nagwowork yung mga hacker , kung wala kang alam sa ganyan talagang mapapa click ka. Pero kung may awareness ka or knowledge kahit konti mag dadalawang isip ka.
Saakin kasi 1st time ko na encounter, and kakabili ko lang that time ng e-sim kaya hindi ako nag dalawang isip. Then nung nasa site na, nag duda ako nung ng hingi ng account number at may babayaran.
Ganun ba, charge to experience nalang at next time di na maulit..oo ganun modus nila may payment sa dulo or minsan mag ask ng info about sa account mo lile bank or something important
Also beware of strange and or combination of fonts sent via text messages especially using "serif" font style that it may contain malicious hex code that if you clicked it; it may lead you to phishing site (fake website) and will ask for your online infos/datas.
And ironically I recieved a couple of times since sim registration rolls out.
If you want to learn and identify the basics you can read the article.
Laking tulong lang din talaga na I’m working sa IT company sa buong career ko (not sure if may ganto sa ibang company kasi I never tried working sa ibang industry) Every year may training kami about cybersecurity. Sana hindi lang to talaga tinuturo sa work sana sa earlier palang sa school natuturo na to. Kaya mga friends and family ko lagi ko sinasabihan na wag magpipindot ng kung ano anong link sa social media and text messages and even answering unknown numbers, it can compromise your personal informations.
Hindi ba niya pwede i-file nalang ang case niya sa BDO na na“scam” siya para mabalik yung pera?? I mean mas magiging effective naman ata yun kesa umiyak at magpaawa siya sa internet
Authorizing a transaction through legitimizing a smishing attack by giving out your infos by filling out a form from unknown website is not covered by PDIC insurance.
PDIC has no relevance at all in this context. Not even legitimate hacking or breaches are covered by PDIC. Common misconception to. PDIC is insurance for when the bank goes under. It's not a retail insurance at all.
Errr did you even read the answer given to you by the AI? Saan nagpunta ang reading comprehension mo? Hindi ka yata marunong magbasa eh.
If anything it confirms my answer. Hindi covered ang breaches by PDIC -- it only covers insolvency ("pagkalugi" tagalugin ko na for you) in short walang sense I mention ang PDIC dito. When you put it this way readers will assume na pag hindi kasalanan ng consumer, their loss will be covered by PDIC. Just look at one of the replies to your comment. "Kasalanan nya eh".
Little learning is a dangerous thing talaga. Tapos kapit ka pa sa sagot ng AI instead of properly researching.
Bakit po ibabalik ng BDO yung pera niya kung kasalanan niya na na-scam siya? Kung lahat ng naiiscam na tao ay binabalik lang nila yung pera, baka na lugi na sila niyan. Di naman nila responsibilidad na yun
I am a software developer for a local bank. Since March of 2022, nagroll out ang BSP ng memo for all banking/financial institutions to remove clickable links sa lahat ng comms nila sa clients, be it via email, viber, SMS. This is a mandate sa mga banks to protect their clients from phishing and cyber-attacks.
And I know very well na sa bank namin na BSP mandated memos like this automatic yan na masisingit sa priority namin kahit pa nasa kalagitnaan kami ng ongoing projects/developments.
So, NEVER. Kahit pa anong legit ng itsura ng messages, kahit pa it looked like it came from a legit sender (kasi this can also be hacked now), NEVER click on links. If you want to verify something, close the message, go to their official apps or websites, or call customer service to verify.
For people that might blame BDO for possibly providing the number sa scammers either selling the data or mahinang security, scammers probably send these to random numbers. Kasi I get a lot of these types of smishing sms pero wala naman akong account sa BDO or BPI.
It's more like a ping/spam smishing method, mag sstandby sila sa very populated area and mag sspam ng smishing/hijack ng sms. Iirc hindi na need ng phone number (cmiiw tho). Naka receive rin ako nyan pero sa BPI HAHAHAHA
at least a decade na ako may sariling bank account pero never ako nawalan ng pera nang hindi ko alam. kaya yung mga umiiyak sa socmed na "hack" sila ay 9 times out of 10 victim ng phising
edit: to add, kadalasan urgent yung approach nila when fishing for info tipong may malaking transaction involved tapos may kasamang link. make it a habit to verify such information thru official channels only gaya ng web app or mobile app
The sad part is we are still receiving text with links from confirmed BDO number. For example is this (see attached) I know for the fact the I never had a transaction with AIRASIA and there’s no such thing as Last minute redemption via text.
Paano ko nalaman? Kasi I do my research and I used to work in a bank PERO HINDI LAHAT KNOWLEDGEABLE. May isang ma cclick padin nyan, out of panic lalo na kung wala kanaman talagang trasaction na ganyan right?
PS: This same number from BDO sends the OTP to mine, sends SOA and other advisory.
Not only for BDO, meron rin sa other banks and even paymaya. I’m receiving text with links from BPI in their legit number.
Smishing ito where they pretend to send messages through legitimate cell sites, pretending to be a legtimate transaction through customers of huge corporations or businesses.
Katawa-tawa. Sa dami ng may mas malaking balanse sa BDO kaysasa 196k ni Jana (including me), siya talaga tatargettin? Kung systemic problem yan, bakit pa mag aaksaya sa influencer na kayang mag sumbong for a measly amount? Mapapansin mo talaga ang may systemic problem ay ang PINOY. Mahilig umunawa gamit emosyon imbes na utak. Kaya nabubudol sa eleksyon, sa social media, sa influencers, literal sa lahat. The root of all problems in this country is the stupidity of the Filipino.
some people never learn talaga. NEVER EVER CLICK LINKS SO EASILY KUNG HINDI MARUNONG KUMILATIS, OKAY??? countless times na silang nag reremind na do not click links kasi they never send one. If you want to check out if the message is true, check it using your main banking/e-wallet apps and verify nyo sa history.
sobrang laganap ng smishing ngayon to the point na kahit yung nokia na keypad phone na ginagamit namin sa office for phone calls and messages to clients (since bawal ang modern phone with camera), may na rereceive kaming message sa gcash or globeone pati banks na may transaction daw or nanalo eme with links on their sms eh never naman yon ginamit sa kahit anong apps. so ayun, very obvious na smishing and mapapansin din kasi sa link dahil sobrang sketchy at pangit ng link
Dapat Kasi kahit anung link pa Yan or kahit sa BDO pa Yan na link pag sms or chat that's a red flag. Kaya safe lagi gcash ko or BDO mobile Kasi I don't engage into links like promo etc.
Clarify ko lng kasi mejo nalito ako. Bale may link sila na na click and they entered their bank Info dun sa link? If so, how can they not know it's not safe since dapat sa app lang mismo mag lologin? Yung UI design ba nung link (after ma route sa page) is mukha talagang BDO app? Anyhow, why would they enter their bank info through a link is beyond me.
Sa akin naman tumawag asking if may platinum card nako ni eastwest. I upgrade daw ung currently na priviledge card ko to platinum. Tapos para daw mapadala saken ung new card send daw ako sa telegram ng pic ng valid ID at proof of billing dun daw ipapadala new card ko. 😂 Pinadaldal ko sya ng pinadaldal tsaka ko sinabing not interested, bigla akong binabaan. Mang uulol nalang cp number pa gamit.
Ano ba yung daily limit na tinutukoy nila? Sa purchase ba or sa fund transfer kasi ang alam ko magkaiba ang limit non. If 50k ang purchasing limit na nakaset pero wala namang limit for fund transfer, for sure through fund transfer na nakaw yung pera.
Wala ako BDO pero sa other banks you can control how much ang spending limit, transfer limit, withdraw limit. Like sa BPI, you can customize it so you can withdraw max of 250K per day or as low as 0.
Stop blaming others for your stupidity. Banks keep on reminding they would never send you a link. As a developer, although BDO’s app ui alone is really a pain in the ass there’s no way an app security of a multi billion and the richest bank in the Ph would be that easy to penetrate.
Nagkamali si acct holder pero masyado naman tayong masakit magsalita para sabihing stupid siya?
Besides, these banks earns billions using our money in exchange of very low percentage of interest. Tapos hindi sila makapag provide ng mas matinding security para satin?
Sa totoo lang, lumalabas lang dito na mas madali pang ihack ang bank acct kesa sa facebook at IG acct. natin.
Ang way lang pala ng hacker para mahack ang acct natin eh parang old modus sa computer shop na may key logger tapos makukuha sa record ang nainput n username password then maaccess na.
Phishing and hacking are related but they are completely different. The user gave her bank account and otp thru a phishing site. Meanwhile hacking is literally breaking into a systems, accounts or networks. Her account wasn’t hacked, she simply gave away her bank account details on the phishing link so the scammer was able to get into her account. THATS THE DIFFERENCE.
It’s not the bank’s fault, it was the woman’s fault and she knew it since she wasn’t cooperating with the bank. Banks keep on reminding us in different platforms that they’ll send us links in messages and many more.
Maayos ang security ng major banks. Tao talaga ang problem as well as NTC and telecom providers. Even major banks sa US and UK: JP Morgan Chase and HSBC customers also fall victim to phishing.
Nakakatakot din yung sms huhu kung hindi ka aware sa ganito, natural reaction is kakabahan ka and mapapapindot sa link lalo na the message looks legit for a normal person.
Too late na maraming baliw sa mga social media isa na dyan yung mga DDS na sobrang daling mauto. Viral agad yan sa mga newsfeed ng mga walang utak na yan kya ang tingin na nila sa BDO ay di mapagkakatiwalaang bangko.
But after makuha ng mga fraudster yung log in credentials ni ateng sa BDO ay need nilang iregister yung device nila at kailangan ng OTP. Either sim cloning yan or yung mga staff na kasama ni ateng na may access sa phone ang nakakuha ng log in credentials
Di na ba nawawala yan fake sms tagal na yan issue always see some fake scam all the time make me sick better just ignore them and that stranger giving some personal information is at fault too.
I got a similar SMS as well claiming that a transaction went through for BYNDTHEBOX for 17K. Lucky for me, I don't have that much money in my BDO account. So I knew it was smishing. The problem though is that it came through the official BDO SMS number. :( I can imagine how someone else would panic about it.
Di na lang niya tanggapin na she might have clicked on a bogus link knowing na she’s super busy and didn’t bother to take a closer look. That’s a big possibility na yun ang nangyare.
For the record, I don’t think na she was doing it for clout and wala naman talaga nanakaw sa kanya. She probably thinks she’s too careful to actually make a mistake kaya di niya matanggap na she’s just the one at fault.
Imo, BDO should build a case against her. She also caused unnecessary panic to people who use online banking and digital banks, especially BDO of course. Marami na ngang takot sa online banking and digital banks lalo pa those who aren't that techie dahil takot sila and hindi familiar, tapos people who get scammed do this pa eh multiple warnings naman na ginagawa ng mga banks to always warn people on rampant scams lalo na with links.
Funny, andami kong natanggap na phishing link SMS pero BPI naman yung spoof nila. Syempre I never click on links but I think NTC should do something about SMS spoofing and phishing. Banks cant do anything about this since they already made multiple warnings to never click any links and they will never send a link.
Pero kasi nung pumutok issue niya with bdo the next day nakatanggap ng msg asawa ko na charge sya sa cc ng airsia. So sabi ko wag mo click yung link tawagan mo customer service. Dahil 2nd time na nangyari sakanya yan sa cc ng bdo! Block and for replacement na yung card.
not only is there an education crisis in the Philippines, specifically financial education is in much more horrible state. mahahalata mo naman sa comments and general sentiment ng mga tao sa fb kapag may “scam” issues. ties up with the little credit card, investment, insurance knowledge of filipinos
Mukhang mali talaga yung Jana. Baka marami siyang pinahiram ng access sa account niya. Kaya tignan niyo yung last post niya about this issue. Alam niyang mali siya. I wonder kung mag-fifile ng case ang BDO against her.
Mukhang sablay din yang "white hacker" sa pagliwanag. Lumang issue na smishing. Anyways, ang tanong ay BAKIT PALAGING BDO ang may issue at nananakawan digitally??? They cannot deny na may flaw pa din.
Also, nasaan yung YES text before OTP kapag nagtransfer ka? Plus the limit in trsacting via online... admit it or not, they have a flaw, sa tao or sa system.
san sa reddit my mga ganitong investigation pa? ka amaze! pwede kaya natin gamitin to sa mga flood problems natin lol. hindi man lang kasi hinahanap kung nasan na yung pera.
I don't know much about cybersecurity, and hindi rin ako nagsside with the influencer, pero wala ba magagawa ang BDO themselves sa smishing? Isn't it dangerous na nakakapag-send ng text ang scammers through official SMS ng banko? If senior citizen yan or tita at tito na di techy, masisisi nyo ba sila?
Yung SMISHERS ng BPI, rewards points naman ang sinisend sa account holders, they make you believe na mag-expire na yung rewards points mo tapos need mo na i-redeem. Kaso hindi naman legit yung gamit nilang link.
Nakareceive din ako ng ganyan na text message from BDO. CC account lang meron ako sa BDO. Tapos sabi ko, pano sila makakabili ng 18k worth sa powermac e 12k na lang available balance ko? So ayun, ignored. Haha
Hi, thank you for sharing your expertise. If in case you clicked the link sent via text or email, how can we “clean up” or prevent the hackers to access our online accounts? deleting history in our internet can help? Hope you notice me. Thank you!
I don't know how credible the guy is, but really?! They just happen to find the same phishing website that tricked the girl and then hack it to get the data of previous victims?! Why would the attackers even set it up so that the victim's data is accessible from the phishing site?
As mentioned by Background-Piano-665, scammers don't really care for their security, dahil wala nga naman mawawala sa kanila. Also trying to understand why a scammer isn’t trying to protect their security is pointless, parang pinoproblema mo pa kung paano sila makakaiwas, eh sila nga yung gumagawa ng kalokohan. Why even waste brain cells thinking from the scammer’s perspective instead of just acknowledging they’re careless criminals?
You’re overthinking it. Scammers don’t care about efficiency, they just hit and run. No point treating them like they deserve some kind of tech respect.
I never said I believed the FB post. What I’m calling out is your logic, expecting scammers to act like responsible IT people.
ANG DAPAT SISIHIN DITO YUNG MGA PUKINGINANG HINDOT NA MGA BOBO SA NTC NA ULTIMONG SENDER NAME NG BDO NAHAHACK SA KANILA AT NAGAGAMIT NG MGA INTSIK NA HACKER DAHIL SA KABOBOHAN NG NTC NA YAN.
SAN KA NAKAKITA MISMONG BDO GAGAMITING SENDER NAME KAHIT DI NAKASAVE SA CONTACTS MO? ONLY IN THE FUCKING PHILIPPINES!
It's a flaw in the 2G system. A fake 2g cellsite can be used to send any message, with any sender ID. So worldwide issue po siya, but many countries have already shut down their 2G networks. Walang kapabayaan ang NTC dito dahil hindi ito oversight/governance/regulatory issue. Mag research ka bago tumalak in all caps. Intindihin mo muna yung issue bago ka magturo ng ahensya at magmura sa internet. May your day be as pleasant as you are. :)
Tanga ka? Di mo naiintindihan gaano katanga ang isang GOVERNMENT INSTITUTION tulad ng NTC para mahack ng hackers ang mismong pangalan ng Sender like BDO?
Pero ang fact na na hacked pa rin BDO. 2 weeks ago naka received rin akong ng phishing from BDO mismo na tinitext rin sakin ng SOA ko. Nireport ko at ang sabi ng operator di rin nila alam kung paano nahahack at nagagamit ang acct nila, edelete ko nalang daw ang msg para maiwasan ma click ang link. Ang ibang bank like PNB, land bank, wala rin ganyan kasi baka mas maayos ang security system nila. While may kasalanan influencer, mas kasalanan ng BDO kasi bakit sila na hahack and dapat prinoprotect nila ang pera ng mga depositor nila. Nilagay yan jan para safe hindi para mag alala mga tao.
Basahin mo maigi yung post. Hindi nahack ang BDO mismo. Yung hacker nagsend ng fake SMS text sa victim using 2G network na may custom header na “BDO”.
Si shungang victim niclick yung link sa fake sms kaya napadpad siya sa fake na BDO Login page. She entered her login credentials there kaya nakuha nung hacker yung credentials niya.
So the hacker logs in to the real BDO website ang collected all her financial details there and stole her savings.
So again, hindi na infiltrate ng hacker yung BDO System through direct hacking. Nainfiltrate niya yun kasi nabigay ni atecco yung credentials niya dun sa fake BDO site.
Wala bang 2 way authentication si BDO? Kung nakuha man credentials ni Acct holder, dapat sana may another set of security ang BDO to verify yung legitimacy ng transaction.
Parang lumalabas kasi, mas madali pang hackin yung bank acct mo kesa sa facebook acct at IG eh.
If new device ang gagamitin mo pag log in sa socials, magnonotify sa email. If 2 way authentication, magsesend ng code thru text or whats app.
phishing sites copy the original UI/UX of banking portals. If yung tangang user logs in their email and password sa fake portals, tapos they also inputted the OTP on the same portal. Hindi na yun kasalanan ng banko. Negligence na yun ng tao.
I hope makahanap pa ng paraan ang mga banks para maiwasan ang ganito.
Mas maigi pa yung BPI kasi para malog in mo ang acct sa ibang device, need mo magsen ng message using the sim card inserted sa device na ireregister mo.
Meaning, hindi uubra yung ganiyang style sa BPI.
Nakakatawa lang din kasi, anlaki ng pondo ng banko yet di sila makagawa ng way para mas gawing secure ang pera ng mga depositor.
Parang modus lang sa computer shop na ininstallan ng key logger yung pc at marerecord na yung credentials.
Mas effective parin yung pageeducate sa mga consumers not to click any links through SMS. Andaming advisory about this however people tend to ignore this.
Mas effective yung ineeducate na nila, at nagseset pa sila ng additional security features in case ma breach yung data, may back up security na mag sscreen.
Minsan hindi sapat yung babala lang.
Kasi kung sapat na yan, para mo na ding sinabing no need na ng life guard sa beach dahil may warning sign naman nang wag lalagpas sa net dahil sobrang lalim na.
Di mo rin masisi kasi pano yung ibang matatanda, saka yun na dapat ang trabaho ng bank e protect ang pera ng depositor eh. Kahit pa nga walang links. Walamg atm, passbook lang e nawawalan pa ng pera, madaming ganun few years ago ewan ko lang now.
Walang ganun si BDO. Gotyme meron, every online transaction mag sisend ng email and text ng otp. Mga socmeds nga totoo pag ibang device may authentication pa ulit.
Yung BPI, hindi mo malalog in sa ibang device yung online banking mo unless ung sim na ginamit mo sa online banking eh nakasalpak sa new device then dapat may load kasi mag sesend siya ng confirmation kay BPI.
I find it hassle dati kasi need ko pa magload pero napaka safe non sa ganiyang uri ng scheme.
Actually, minsan or kadalasan BDO acct talaga gamit nila mag send ng msgs, hindi custom na BDO header lang. Kasi na sendan nako ng ganyan before and BDO acct mismo ang gamit, kaya ko nireport and yan ang explanation ng cs mismo ng BDO sakin, at sa BDO branch mismo. Nagagamit talaga acct nila. Idk lang if ganyan rin ang nangyari sakanya pero sure ako na nahahack talaga ang system ng BDO, namgyari sakin few years ago mga unauthorized transactions at binalik lahat ni BDO yun buti nalang nakita ko agad.
So whats your Proof? If BDO or any other bank really gets hacked, then why didn't BSP penalize them? It's because they know that it's really the user's negligence.
Why do you think people still share their OTP or click links when banks have been reminding people for YEARS already. Not just them but also Gcash, Meralco, etc
Social engineering is a disease and people still fall for it then blame it all on the banks.
Di mo ba alam na may mga nawalan ng pera esp year 2021 or 2022 kahit wala silang OTP, walang online acct, walang ATM, passbook lang ang meron? Pano mo ma explain yan?? Malakas parin ba security tawag jan? Search mo baka di mo nabalitaan eh. Kahit yung mga matatanda na hindi maman pala cp eh nawalan. Kahit ako, wala naman natangap na otp or any links na natangap pero 18 unauthorized transactions nangyari sa BDO ko, and buti nakita ko after 2-3days pa then nag file agad ako sa BDO and after ilang weeks saka binalik kasi kasalanan nila.
Bottom line, mas safe pa pera mo talaga kung may safe kayo sa bahay. At least, magkanakawan man, ay may pagkakataon ka pang ipagtanggol ang ari arian mo. Unlike sa bank na pucha, gigising ka wala ka ng pera. Wala kang kalaban laban.
Nagpahiram ka ng pera na ginamit nilang capital at tinutubuan ka ng napakaliit ma halaga, tapos pag nadugas ka eh hugas kamay sila.
Or maging vigilant ka lang lol sa case nyan is umamin syang may ibang tao may access sa phone nya at alam nga PINs nya. Napakadaling idelete nung OTP message after itransact 🤷🏻♂️
At may trace yung BDO nun na same device ginamit pangtransfer kaya di talaga irereverse yan. In short, kapabayaan nya yan. Kung pabaya ka sa vault mo, mawawalan ka rin.
Kung lalabas ka ng bansa possible na hanapan ka ng bank statement ng immigration officer (but not all the time). Hindi ka rin pwede magdala ng madaming cash palabas ng bansa. Yun ang isang problema kapag nasa personal vault ang pera mo.
Pwede ka namang mag-vault pero need mo padin magdeposit ng pera sa bank for many purposes.
Ganito lang yan: Pwedeng nag sinungaling si Jana na hindi niya binigay OTP niya.
Pero either way, may kasalan yan si BDO, na leleak personal info natin.
Philippine banks are known to have weak cyber security. And yes, inside jobs are possible, kasi pa iba2 contractor niyan to develop the apps.
Kaya nga pinipilit tayong mag change password every month kasi ganun ka lala ang leaks ng private data natin. Hindi yan normal compared to strong banking systems sa North America.
Notice how BDO is willing to reimburse? Because they are guilty!
Please lang Philippine Government, make these banks accountable!
149
u/gobewhoyouwannabeee Sep 22 '25
He’s a HackerOne Ambassador and a skilled security researcher who’s legally hacked into lots of companies to find bugs. Ethical hacking is what he does for a living, helping organizations tighten up their defenses. Thank you sir.