The Gazette | Hacker who recovered Davi’s Instagram from BBB gives tips for shielding networks

Having your account stolen is a huge headache for any social network user. For those who depend on digital media to work, it can mean a huge loss. But not every hacker is a threat. Some of them work precisely to protect and recover hacked profiles. One of them is information security and cyber threats expert Eduardo Araújo, who helped the current Big Brother Brasil champion, Davi Brito, to recover his Instagram account. He talked to The Gazette about the case, which occurred on Monday (29), and gave tips for those who want to avoid disruptions in the digital world.

Eduardo is CEO of the company Vorax Cybersecurity, specialized in recovering hacked accounts. In addition to the BBB 24 champion, the company has also helped several influencers to recover their profiles. Among them, the author and performer of the hit meme “Caneta Azul”, singer Manuel Gomes. Check out some tips from the cybersecurity expert below to avoid problems on the internet.

A few years ago, cell phones had the function of making and receiving calls, with SMS being a communication revolution. At most, they had a little game (usually the classic “snake”, remember?). Now, do the following exercise: imagine yourself without your smartphone. Depending on the type of user, it is possible and even normal to have your whole life there, in documents, banks, photos of favorite places and family members, social networks, email, apps for ordering food, apps for transportation, apps for everything .

A simple game or an investment app, however, can hide a threat. The cybersecurity expert warns that there are disguised applications that capture images of the user and everything they type on the device in real time to send to criminals.

The number of passwords we need to memorize is huge. But it is an important security barrier for the personal information we put on the internet. Therefore, Eduardo reinforces the need to keep them updated. “For all these services, you need to change your password at least every two months”, he advises. Furthermore, the expert recommends not using the same password for all services, in addition to recommending the use of two-factor authentication.

It is common for criminals to exploit victims’ lack of knowledge in technology. Therefore, Eduardo reinforces that, when using any type of digital resource, it is important that users try to learn basic notions about how the internet works. “You need to know that you cannot click on any link and that the data that people provide, such as their telephone number, can be violated”, warns the expert.

Eduardo recommends that, as soon as a person realizes that their social network has been hacked, they need to file a police report (BO). “It’s the first recommendation I make. After stealing a profile on a social network, criminals can use it to scam other people. To avoid suffering legal proceedings or having a dirty name, the first thing a person should do is to alert the police authority so that you can be supported”, he explains.

By note, the Civil Police said that, in relation to account hacking, it is up to the victim himself to proceed with the search for recovery. The user must contact the platform to try to recover the account. “The Civil Police’s role is to investigate and identify those responsible for carrying out the invasion. The police report is necessary for the victim to protect themselves against people who may be using their data inappropriately”, informs the PC.

Obviously it is necessary to pay attention to the technological resources used by criminals to carry out scams. However, Eduardo warns that the coup plotters’ main strategy is old: “social engineering”, popularly known as lip service. “They use images of people. They promise good investments, ask for Pix and people believe it”, says the expert.

“Sometimes even some influencers publicize forms of investment and make people believe that they will get rich in the same way. But, when you see it, it’s a scam”, warns Eduardo. “Most of the time, what happens is not a system failure, it is a human error. The strategy behind scams, such as phishing, is social engineering”, he points out.

One of the main features of mobile telephony today is not having to change your phone number, change your SIM card or operator, due to portability. Scammers, however, take advantage of this to carry out a scam called “SIM Swap”, which works as a type of hijacking of the line, as Eduardo Araújo explains. He says that this was the blow that Davi Brito, BBB 24 champion, fell into.

Criminals usually go to a different operator than the one on the line to be captured, pretending to be the victim, and present false documents to carry out the portability procedure. The line then starts to work on another SIM card (the cell phone’s chip), which is in the criminals’ possession. Thus, they start receiving, for example, calls and SMS (text messages) to recover passwords for social networks, emails, bank accounts, among others, from the real owner of the line.

Even with the National Telecommunications Agency (Anatel) and telephone operators implementing more security measures for the portability process, Eduardo Araújo states that he has already come across cases in which operator employees use work tools and documents obtained in illegal databases to apply SIM Swap.

In a statement published on its website, Anatel informed that it determined the inclusion of a second authentication factor in the portability procedure. “This involves sending a text message to the terminal subject of the portability request, to confirm the request”, says the text.

According to the agency, once confirmed, portability occurs normally. If the answer is “no”, the portability request is automatically cancelled. “Consumer identification procedures are also used through the use of facial or voice biometrics techniques. To prevent fraud in the financial system, providers make information available to banks, enabling them to adopt preventive measures regarding financial transactions linked to the number cell phone involved in chip exchange”, says Anatel.

See below a video that explains what the BBB champion fell into.

Conexis Brasil, which represents the main telephone operators in the country, was contacted to comment on the involvement of company employees in SIM Swap. However, no response was sent.

BBB 24 champion, Davi Brito, had his Instagram profile hacked on Monday night (29). The criminal made publications about offering a financial scheme in the BBB 24 champion’s stories, even stating that “it was not a pyramid”. Shortly afterwards, the “brother” team confirmed the invasion. “They hacked the Instagram account of Davi Brito and Raquel Brito (his sister). We are looking to regain access”, they posted on another network.

In addition to the Globo reality show champion, Davi’s mother and sister also had their accounts hacked. In the early hours of the morning, between Monday (29) and Tuesday (30), the Bahian informed that he had already recovered the account. He thanked his fans and warned them of the scam.

“I’m here to thank each and every one of you who took action to help me. Thank God, the account is recovered. Everything went well and tomorrow (Tuesday) we will return with activities. I am very sad about the situation that happened. No It’s been easy, but with all the struggle, we’re going for it with all the strength we have,” he said on Instagram.

Did you see any errors?

Talk to the editorial team