GLGT - [BREAKING!] ICA temporarily suspends e-service after 80 unauthorised attempts to change residential address

LocalRider

Master Member
Joined
Aug 7, 2022
Messages
3,838
Reaction score
2,329
https://www.channelnewsasia.com/sin...d-attempts-change-residential-address-4851621

No indication that this is linked to the ACRA episode… :unsure:


Responding to questions from reporters, Mr Sim also said there is “no indication” that the incident is connected to the recent exposure of NRIC numbers via the new Bizfile portal of the Accounting and Corporate Regulatory Authority (ACRA).

“For the ACRA portal, the date of issue is not known ... because for the perpetrators to change (the residential addresses), they need both the NRIC and the date of issue (of the NRIC),” he said.

ica_press_conference.jpeg


marvin_sim.png
NRIC cannot be used to authenticate identity but date on NRIC can? 😅
 

jonesftw

Great Supremacy Member
Joined
Jul 12, 2010
Messages
60,451
Reaction score
15,881
Just saw the report on Channel 8 news.. dunno what they thinking allowing people who know the NRIC + Issue Date to change the address..... this is such an obvious loophole and they dun see it??

They should only allow SingPass verify login to do it.. and if they are so old and dunno how to use SingPass to do it online, let them visit police post or police centre to do it... :rolleyes:

ICA said it has resumed the electronic change of address (eCOA) service for the "Myself" module, with additional security measures in place. The "Myself and my family members" and "Others" modules remain suspended.

Those accessing the “Myself” module will now be required to additionally perform face verification when logging in using their Singpass account.

https://www.channelnewsasia.com/sin...tial-address-people-arrested-singpass-4857536
 

A Better Tomorrow

High Supremacy Member
Joined
Oct 12, 2016
Messages
34,105
Reaction score
5,858
with the type of supercharged computers that scammers use these days..even 1000 guesses is like what a handful of seconds? Problem is this 'solution' narrows down the 'guessing' game for these scammers even more!
Brutal force will eventually crack it and NRIC is just like sitting ducks.

Need a new form of field for authentication.
 

jonesftw

Great Supremacy Member
Joined
Jul 12, 2010
Messages
60,451
Reaction score
15,881
lol, sg cyber security has always been a joke, well known fact amongst the scammers ma, nothing suprising

Three Singaporeans have been charged over unauthorised attempts to change residential addresses on an online service provided by the Immigration and Checkpoints Authority (ICA).

Ng Wei Chang, Yuen Mun Fei and Koh Hong Yan appeared in a district court on Friday morning (Jan 17).

Each faces a single charge under the Computer Misuse Act.

Ng, 30, was charged with unauthorised disclosure of an access code for an unlawful purpose.

He is accused of abetting the disclosure of a six-digit PIN to gain access to data held in the ICA e-service to illegally change the registered addresses of unknown individuals without their knowledge.

He allegedly did this sometime on or around Oct 1, 2024.

Yuen, 38, was charged with transmitting Koh's user identification, password and one-time password for the national digital identity service in November 2024.

These credentials were allegedly to be used in committing an offence under Section 3(1) of the Computer Misuse Act, which covers unauthorised access to computer material.

Koh, 26, was charged with disclosing his SingPass user identification, password and one-time password to Yuen for an unlawful purpose on Dec 16, 2024.

For these offences, the punishment for a first-time offender is a jail term of up to three years, a fine of up to S$10,000 (US$7,300), or both.

The prosecutor said the offences were believed to be syndicated, and asked for the trio to be remanded for a week for the police to conduct a raid and investigations.

https://www.channelnewsasia.com/sin...s-unauthorised-attempts-three-charged-4864506
 

Hakuna Matata

Supremacy Member
Joined
Oct 20, 2011
Messages
5,281
Reaction score
1,921
Sabo King. How did they obtain the login credentials?
For high-risk transactions, logging in with SingPass will ask for face verification.
More organisations will follow suit.
 

xdivider

Great Supremacy Member
Joined
Nov 8, 2000
Messages
53,609
Reaction score
14,836
Three Singaporeans have been charged over unauthorised attempts to change residential addresses on an online service provided by the Immigration and Checkpoints Authority (ICA).

Ng Wei Chang, Yuen Mun Fei and Koh Hong Yan appeared in a district court on Friday morning (Jan 17).

Each faces a single charge under the Computer Misuse Act.

Ng, 30, was charged with unauthorised disclosure of an access code for an unlawful purpose.

He is accused of abetting the disclosure of a six-digit PIN to gain access to data held in the ICA e-service to illegally change the registered addresses of unknown individuals without their knowledge.

He allegedly did this sometime on or around Oct 1, 2024.

Yuen, 38, was charged with transmitting Koh's user identification, password and one-time password for the national digital identity service in November 2024.

These credentials were allegedly to be used in committing an offence under Section 3(1) of the Computer Misuse Act, which covers unauthorised access to computer material.

Koh, 26, was charged with disclosing his SingPass user identification, password and one-time password to Yuen for an unlawful purpose on Dec 16, 2024.

For these offences, the punishment for a first-time offender is a jail term of up to three years, a fine of up to S$10,000 (US$7,300), or both.

The prosecutor said the offences were believed to be syndicated, and asked for the trio to be remanded for a week for the police to conduct a raid and investigations.

https://www.channelnewsasia.com/sin...s-unauthorised-attempts-three-charged-4864506
千防万防,家贼难防.....
 

jonesftw

Great Supremacy Member
Joined
Jul 12, 2010
Messages
60,451
Reaction score
15,881
千防万防,家贼难防.....

The police have arrested another six people in relation to a series of unauthorised attempts to change registered residential addresses through an online service by the Immigration & Checkpoints Authority's (ICA).

This brings the total number of arrests made so far to 13.

The latest suspects - five men and one woman aged between 18 and 39 - were nabbed following islandwide operations, the police said on Friday (Jan 17).

https://www.channelnewsasia.com/sin...hange-addresses-unauthorised-attempts-4869916
 
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ. Forum members and moderators are responsible for their own posts.

Please refer to our Community Guidelines and Standards, Terms of Service and Member T&Cs for more information.
Top