The CSIRT NASK team warns of a new way cybercriminals operate to obtain login credentials for bank accounts. In addition to SMS messages containing links to fake sites, scammers have started using emails. Experts warn that criminals can appropriate funds from the victim’s bank account.
Experts from the Scientific and Academic Computer Network’s CSIRT (Computer Security Incident Response Team) warn of a new way cybercriminals can phish bank account login information.
– It is still common to impersonate PGEbut in addition to the already known text messages containing links to websites set up by scammers, fake emails have also been sent, they warn.
In sent messages a message about a failed electronic payment should appear. The message contains a link redirecting to a fake PGE website, where a form is available where the victim has to provide their payment card details in order to complete the energy payment process. – In fact, this data is hijacked and used to steal funds from the victim’s bank account. – warned.
Over the past two years, companies have felt the impact of the pandemic and the armed conflict in Ukraine on their security. Cybercriminals have taken advantage of the difficult situation – the percentage of Polish companies affected by ransomware has increased from 13% in 2020 to 77%. in 2021, according to a Sophos study.
