Gearbest app hacked

[Lee]

Just seen this posted on a facebook group

Info from Reddit: Gearbest mobile application has been probably hacked some time ago. Change your password and better don't use mobile app as it has an unpatched vulnerability! Use normal PC website and change password.
If you were logging via Google+ or FB, then you don't really have to change password.
"The online store claims to be aware of the situation and have already warned the users involved in the theft of information, inviting them to replace the password of their account. The security team is already working to strengthen security measures and make the site and the data of its customers more secure."

[Lee]

More found on facebook

There is official info from Gearbest about these hacking attacks:
Dear Valued Customers,

We kindly bring your attention to the fact that some unidentified hackers gained large amounts of personal data from other websites and are trying to use this data to deceptively sign into Gearbest. Immediately after identifying this irregularity, we have frozen a few hundred affected accounts and updated our IT system for suspicious IPs. The situation is completely under control.

However, for your personal account security, we kindly recommend that you change your password if you feel that it is too simple (password with a combination of letters, numbers and symbols are considered to be more complex). At the same time, we also recommend that you do not use the same email address and password on different websites.

We will always be 100% committed to maintain our website as a safe and reliable place for your guaranteed shopping experience.

If you have any queries or may need any assistance, please contact our Support Team

Yours Sincerely

[joeten]

Well that app will be deleted for now Lee cheers for the heads up.

[oldleatherlungs]

Personally I don't have any "payment" apps or stored credit cards on my mobile.

[Lee]

By the sounds of it the hackers have used it to access their customer database
No passwords are encrypted there
A list of log in's, taken from them, has been shared on the net

Until they plug the hole, you can change your password and the new one will be know to the hackers

[joeten]

Expect the spam to increase quite a bit, had it happen on other sites not all of them being vendor type sadly it happens and security is not guaranteed anywhere.