QANTAS Cyber Incident

I'm only going off media reports....


"This group has previously targeted airlines by using “vishing” – a tactic involving phone calls to IT support lines where attackers impersonate employees to obtain login credentials or reset access."




I can tell you that where I work, it's very easy to reset your password by calling IT support and passing a very basic security check, of which, you'd find the information on Linkedin..... In some cases they will even give you, your username....

Of course you need the username to start with to log-in, but that's pretty easy to obtain from some staff members...
 
Elevate your business spending to first-class rewards! Sign up today with code AFF10 and process over $10,000 in business expenses within your first 30 days to unlock 10,000 Bonus PayRewards Points.
Join 30,000+ savvy business owners who:

✅ Pay suppliers who don’t accept Amex
✅ Max out credit card rewards—even on government payments
âś… Earn & transfer PayRewards Points to 10+ airline & hotel partners

Start earning today!
- Pay suppliers who don’t take Amex
- Max out credit card rewards—even on government payments
- Earn & Transfer PayRewards Points to 8+ top airline & hotel partners

AFF Supporters can remove this and all advertisements

Was back in Australia yesterday but flew home on QF so had no wi fi so couln't keep in touch. Was on last night;s news.
Probably a constant stream of scribbled notes between the flightdeck receiving word on the radio and VH.

OTOH, if she flew QR with Starlink, she could’ve had a continuous video call on her phone ( but may have been shushed by the FA).
 
I use the voice assistant. It's where the phone answers for me and asks who is calling and what's it about. I can see the response as text and take over the call should I desire.

Is that an Android thing? I can't see anything similar on iPhone.

I have calls from unknown numbers automatically diverted to messagebank. That cuts out the cr@p.
 
Is that an Android thing? I can't see anything similar on iPhone.

I have calls from unknown numbers automatically diverted to messagebank. That cuts out the cr@p.

It's a Samsung thing as part of their AI stuff. I'd be surprised if Pixel phones didn't have it. Not sure about others. As for Apple....that's a walled garden I do not enter.
 
It's a Samsung thing as part of their AI stuff. I'd be surprised if Pixel phones didn't have it. Not sure about others. As for Apple....that's a walled garden I do not enter.
Pixels have it too, i use it quite regularly.
 
I received the 2nd Qantas email regarding being impacted.
Today, Telstra advised they had changed the Telstra ID for that email account - "We have detected a potential risk to your Telstra ID and believe your password may have been compromised. To protect your personal information, we have reset your password".
Doesn't specifically mention Qantas but one assumes it may be connected.
 
I received the 2nd Qantas email regarding being impacted.
Today, Telstra advised they had changed the Telstra ID for that email account - "We have detected a potential risk to your Telstra ID and believe your password may have been compromised. To protect your personal information, we have reset your password".
Doesn't specifically mention Qantas but one assumes it may be connected.
Unlikely to be directly connected. It's possible the hackers obtained your password through other means.
 
A lot of assumed cause::effect in this thread.

I just noted the last week has had the least number of spam emails for at least three months.

Coincidence or 🤔

[🤣]
 
Is that an Android thing? I can't see anything similar on iPhone.

I have calls from unknown numbers automatically diverted to messagebank. That cuts out the cr@p.
I don't use the Samsung/Android AI stuff (I have it all turned off). I don't use message bank, it is also disabled. I simply don't answer calls from numbers I don't know.
 
I got the second email advising my details were involved.
So far no apparent change in the frequency or nature of scam emails or calls. According to the "pwned" website I have previously been in 4 breaches already. Annoying some of them are from accounts closed many years before.
I don't answer any calls from numbers not in my contacts (they can leave a vm if they really want to talk to me), and for voicemail I have a very short greeting without mentioning names etc that would normally be gone before the automated diallers connect to the scammer agent.
Post automatically merged:

I received the 2nd Qantas email regarding being impacted.
Today, Telstra advised they had changed the Telstra ID for that email account - "We have detected a potential risk to your Telstra ID and believe your password may have been compromised. To protect your personal information, we have reset your password".
Doesn't specifically mention Qantas but one assumes it may be connected.
are you sure the email was from Telstra ?
 
I don't use the Samsung/Android AI stuff (I have it all turned off). I don't use message bank, it is also disabled. I simply don't answer calls from numbers I don't know.

The advantage of diverting unknown number calls to messagebank is that your phone doesn't even ring, so immediately there goes a distraction. When you look at the message and it's about 1 second long, hit delete.
 

Become an AFF member!

Join Australian Frequent Flyer (AFF) for free and unlock insider tips, exclusive deals, and global meetups with 65,000+ frequent flyers.

AFF members can also access our Frequent Flyer Training courses, and upgrade to Fast-track your way to expert traveller status and unlock even more exclusive discounts!

AFF forum abbreviations

Wondering about Y, J or any of the other abbreviations used on our forum?

Check out our guide to common AFF acronyms & abbreviations.
Back
Top