Chinese web giant Tencent has admitted to a significant account hijack attack on its messaging and social media platform “QQ.com”
It’s been started with many unnamed number of QQ users complain their credentials no longer allowed them access to their accounts. Tencent has characterized that issue as representing “stolen” accounts.
Tencent acknowledged this incident stared with criminals posting QR codes that claimed to offer game logins. Users who scanned the codes were asked to authenticate using their QQ creds.
A machine translation of Tencent’s explanation produces the phrase the login behavior was hijacked and recorded by the black industry gang, and then used by criminals to send bad picture ads. Users were also locked out of their accounts.
Tencent’s restored to the normal situation and web giant is now gathering evidence to share with local authorities and has pledged co-operation.