publication
2025-08-05 06:00
Thieves have no vacation. And what's more, they use our holiday distraction to steal savings. They impersonate ads with advertisements, a bank, a courier, and even argue that they have our compromising recordings. The Scam Alert series returns, in which you will get a review of current hacker attacks every Tuesday.
This time thieves reach for “good, good methods”, or various forms of phishing. It may seem that this is already a well -worn method, but as it turns out – still one of the most effective. Phishing is nothing but impersonating well -known brands (banks, shops, couriers, etc.) to extort sensitive information. Usually, the scammer informs about the account lock on the website and the need to take certain steps to remove the blockade.
The CSIRT KNF team informs that criminals sent messages impersonating Otomoto, in which they inform about the “suspicious activity on the user's account”. To “secure” the account was imposed a supposed blockage. It must be removed and confirmed your identity – for this purpose you should log in through the link indicated in the message.
“In fact, it leads to a false page, where criminals extort data for login to online banking. Do not click! Do not provide data!” – warns CSIRT KNF.
Analysts also detected attempts to attack electronic banking clients. This time they impersonate mBank informing about the new payment. “The details are to be in the attachment – the archive pretending to be a pdf file. In fact, the attachment contains a file that can infect the device with malware.” – informs CSIRT KNF.
In turn, CERT Polska warns about messages from alleged couriers. Another week in a row gets reports regarding fraud using the “Uneptified Package” theme. The messages provided a link that redirects to the fake website of the Pocztex operator. People who log in there will probably be asked to pay a fee or transfer data.
A fraud of blackmailing the addressee compromising recordings has also returned. Fraudsters send a message to random e-mail addresses, in which they inform that they have intercepted the image from a laptop webcam and have compromising user recordings. “In exchange for removing materials, they demand the payment of a certain amount to the cryptocurrency portfolio – they threaten that otherwise the recordings will be made public.” – informs Cert Polska.
And although it would seem that they are all old and well -known fraud mechanisms, they still turn out to be surprisingly effective. According to the data of the National Bank of Poland, in the first quarter of this year there was as much as a 20 % increase in the number of fraudulent transactions (so-called frauds) made by means of transfers compared to the previous quarter.
Their value increased almost as much. The central bank includes in this category all transactions that consist in manipulating the bank's client in such a way that it made a transfer to thieves. So there are various types of techniques using, among others Phishing, smishing, vishing or quishing. The average value of a fraudulent transfer was 8,000 PLN.
Do you want to learn more? On Scammingout, we present in detail the diagrams of criminals and advise on how to protect themselves from fraud.
