CERT Polska warns of fake complaint emails. The link may lead to malware
Criminals are sending messages pretending to be customer complaints about damaged goods. Instead of the promised photos, the recipient may end up with a program that gives fraudsters access to their device.
Markus Spiske · Unsplash License
- 0views
- 0likes and saves
- 0skips
Fake complaint in the inbox
According to a warning from CERT Polska, scammers are impersonating buyers who claim to have received a defective product. Such a message is designed to look like a typical complaint submission. The recipient is encouraged to open a link that supposedly leads to photos and recordings showing the defect (Fala maili od oszustów. Można stracić dane. Na to zwracaj uwagę – wp.pl). The criminals' goal is to extract data and money, and simply clicking the link may allow the installation of fake software (CERT Polska ostrzega przed nową falą oszustw. Uważaj na takie maile, można stracić pieniądze | Biznes Info – biznesinfo.pl).
What is hidden behind the link
The CERT Polska team, which is monitoring this campaign, checked what is actually found under the link. It turned out that instead of photographic materials, a malicious program is downloaded. Once installed, it can give criminals access to the victim's device system. The warning emphasizes that the consequence may be data loss, and even savings.
What to watch out for in the company
Particular risk concerns small businesses, as such messages easily reach sales and complaint handling inboxes, where employees are accustomed to opening customer submissions. Before clicking the link, it is worth checking the sender's address and whether there is indeed an order in the system that the message refers to.
Sources
Discussion0
- No comments from this perspective yet. Be the first.