The main objective of these attacks is to obtain user credentials to steal money from their accounts or digital wallets.
By iProfessional
29/04/2023 – 20,11hs
The increase in digital purchases and electronic payments through wallets and applications brought as a counterpart an increase in cybersecurity incidents and digital scams. One of the most common cases is the deception of criminals who through social engineering pretend to be employees of company call centers and lead the victims to hand over their bank details.
In general, cybercriminals claim to contact banks, virtual wallets, credit cards, Internet or telephone services and, through some device, manage to obtain personal information to attack the user’s finances. All the details below.
How these scams work
The classic modus operandi of this scam finds its origin in a WhatsApp message. Thus, cybercriminals contact a random line and pretend to be employees of a recognized company or organization.
The profile photo with the firm’s logo, plus a previously prepared message, convince the victim that it is a service of which they are a client. What she requests: card numbers and security codes, ID photos and other key data that will later be used in her favor to make transfers in her name.
Beyond cold messages, this scam is also carried out through sites fake websites, which appear first in Google search results, when a person wants to enter the customer service system of a company.
These fake pages, which by design appear to be official ones, request the same personal data and achieve the same result: infiltrating the user’s bank account.
“We usually recommend double check who you are talking to. Verify that the phone number or the account from which the companies are contacted coincide with those that appear on the official sites. And, when looking for an official site, do not rush to click on the first result, but make sure that it is a legitimate Internet address,” said Sol González, Computer Security Researcher at ESET Latin America.
