Messages
— Mistport Privacy Aid · internal channel —
Chih-ning’s case is yours. 165 referred her to us: someone took over her Ripple account.21:21
Two things: work out how this scam got her, and where her data leaked from.21:21
If you’re stuck, press “Give me a hint”. The more hints, the lower your rank for the case.21:22
If only BeatBird had that alias, the data leaked from BeatBird’s side.21:36
I’ve just contacted Tang Chi-wen, BeatBird’s data protection officer. The board created the post after the Night Heron affair.21:36
He says that at the end of November they had just handed three pilot files to partner companies, and planted canary records in every download. He’s sent over the logs.21:36
ZIPbeatbird-records.zip
6 KB · Tang Chi-wen · sent encrypted
6 KB · Tang Chi-wen · sent encrypted
He asked one thing: no names in public until the evidence is solid.21:37
What Chih-ning told you
- On the night of 12/7 she got a BeatBird notice: a “Sleep Analysis Premium Plan” at 3,480 a month. It had no link; it told her to search for “BeatBird Member Centre Official”.
- She clicked the top search result, and “Agent Lin” had her scan a QR code with Ripple to “verify her membership”.
- He then told her to open online banking to “cancel the payment”, but the screen said a transfer of 29,800. She hung up; no money was taken.
- The next day her friend Che got a message from “her” asking for game credit.
- The email knew her full name, her phone number and her average sleep. She uses a different MaskMail alias for every service.