5.3 C
London
Tuesday, December 5, 2023

PKP Intercity and Pekao. Scammers impersonate railways and a bank. Fake emails

Must read

- Advertisement -


Naukowa i Akademicka Sieć Komputerowa (NASK) warns against fraudsters impersonating PKP Intercity. Cybercriminals first send emails encouraging you to take part in a survey, and then try to phishing your credit card details. NASK also warns against fraud in which the image of Bank Pekao is used – messages with malicious software are sent to recipients.

NASK reported that the CERT Polska team (Computer Emergency Response Team) is monitoring a campaign using the image of PKP Intercity.

Fraudsters impersonate PKP Intercity

“The main way of attack are e-mail messages encouraging to take part in a customer satisfaction survey. In the next step, the person who took part in the survey is informed about winning a cash prize as a thank you for participating” – informed NASK.

- Advertisement -

She noted that the potential victim is then redirected to a fake page imitating the Przelewy24 website. “Through this website, fraudsters extort credit card details along with the SMS code for 3D-Secure security” – informed NASK.

Bank Pekao and fake transfers

NASK also informed that the CERT Polska team observed a campaign with e-mail messages, the purpose of which is to infect computers with malware from the Remcos family. The image of Pekao SA is used for fraud

“Potential victims receive emails informing them that a transfer has been received. The message contains an attachment that purports to be a confirmation of the transfer. In fact, it is an archive with an EXE executable file. When the attachment is opened, malware is installed that gives the attacker remote access to the computer “- explained NASK.

The network emphasized that initially the software from the Remcos family was a tool for security testing, but over time it began to be used in malicious campaigns.

Internet scams

At the beginning of August, the cybersecurity team at the Polish Financial Supervision Authority (CSIRT KNF) warned against fraudsters impersonating PKO BP. Cybercriminals create fake bank websites and try to extort customer data.

In turn, ING Bank Śląski drew attention to the activities of scammers who spread false information about cryptocurrencies through advertisements. Earlier, mBank also informed that investments in cryptocurrenciesas well as on the forex market, are generally legal, but fraudsters using fake websites impersonate intermediaries and offer investment facilities.

Moreover, it was reported that scammers send text messages to PKO BP customersencouraging you to install a fake application.

Main photo source: Shutterstock



Source link

More articles

- Advertisement -

Latest article