In brief

• CERT Polska warns of a new wave of phishing aimed mainly at business owners.
• Scammers invoke regulatory obligations and an urgent need to update documentation, and the link leads to a fake online banking site.
• The goal is to steal login credentials, so it's best to open online banking only through an address you type in yourself.

Fake requests to update documents

The CERT Polska team, operating within NASK, warns of a new wave of phishing attacks. According to its warning, the messages invoke regulatory requirements and an alleged need to quickly complete company documents. Anyone who clicks the link lands on a site resembling internet banking (CERT Polska ostrzega przed oszustwami internetowymi. „Nowy motyw” – RMF24).

However, the messages do not point to any specific law or obligation that would require such an update. Referring to regulations is meant only to create urgency and push the recipient to act without thinking.

Who the campaign targets

The latest wave is aimed primarily at business owners. The same technique was previously used in emails about foreign-currency accounts, new rules for authorizing transfers, and updates to customers' personal data.

No figures have been given for the number of reports, the scale of the campaign, or the number of victims.

How the scam works

Entering login credentials on the fake site gives criminals access to the victim's bank account. The sender often signs with an address from a foreign domain, and the recipient is sometimes first redirected through an intermediate page. Some scammers attach a PDF file with a name suggesting a data update.

How to protect yourself

CERT Polska advises always opening online banking through the bank's address typed in manually, not through a link in a message. The police issue similar warnings, pointing to fake SMS messages impersonating banks and offices (Masowa akcja oszustów. Wysyłają do Polaków wiadomości. Na to uważaj – wp.pl). Any message requesting a login or asking for data is worth checking first by contacting the bank directly.