HGS mobile app hacked: First statement from the Ministry

Following the hacking of the HGS mobile application, messages containing profanity were sent to users through the app.

A statement regarding the hacking of the HGS mobile application has been issued by the Ministry of Transport and Infrastructure.

Users of the HGS mobile application received notifications containing profanity and cryptocurrency demands. According to complaints from HGS mobile application users, the messages included threats that user data would be shared if payment was not made to a specific Bitcoin address.

According to a statement made by the Ministry of Transport and Infrastructure to Halktv, the ministry stated that there was an unauthorized access attempt originating from abroad to the HGS mobile application, but that there was no data loss.

A sample message received from a user included the following statements:

"If you do not send $25,000 to this BTC address, I will share all the data."

The statement made by the PTT General Directorate included the following:

“In the evening hours, unauthorized access from abroad occurred to the messaging service of our HGS mobile application, and it has been determined that notifications unrelated to our Company were transmitted to some users.

LEGAL PROCESS INITIATED

With the detection of the incident, our security systems were quickly activated, and the necessary technical and operational measures were implemented.

During the aforementioned unauthorized intervention, no data loss or situation such as user information falling into the hands of unauthorized persons occurred. Furthermore, a legal process has been initiated in cooperation with legal authorities. Respectfully announced to the public.”

A SIMILAR ATTACK HAD OCCURRED ON THE ANADOLU SIGORTA APPLICATION AS WELL

This incident brings to mind a similar cyberattack that recently occurred on the mobile application of Anadolu Sigorta. Messages containing profanity were also sent to Anadolu Sigorta users, and notifications containing cryptocurrency demands were subsequently seen. The message sent stated that if 1,000 dollars were sent to a specific account, double the amount would be paid back.

Anadolu Sigorta made an official statement following the attack and shared the following information:

"As a result of a cyberattack carried out on our internet infrastructure on December 9, 2024, at 23:20, it was understood that there was unauthorized access to our mobile application messaging service. We would like to state that all accounts and personal information belonging to our customers are safe."

News Source: 12punto