In brief

• CERT Polska warns of a new phishing wave mainly targeting businesses.
• Fraudulent emails claim companies must urgently update documents and lead to fake banking login pages.
• Victims who enter their credentials risk losing control of their bank accounts.
• Users should type bank addresses manually and avoid links in unsolicited messages.

Phishing emails target business owners

Cybercriminals are changing their tactics to obtain bank customers' login details, CERT Polska has said (CERT Polska ostrzega przed oszustwami internetowymi. „Nowy motyw” – RMF24). The latest campaign is aimed mainly at entrepreneurs. The emails claim the recipient must urgently update company documentation to meet regulatory obligations, and they contain a link to a page that closely imitates an online banking service.

How the scheme works

If a recipient clicks the link and enters login details on the fake site, the fraudsters can take control of the victim's bank account. Earlier waves used similar pretexts, including foreign-currency accounts, new rules for authorising transfers and updates to personal data. A related campaign reported in late October used a sender address and redirect chain that were deliberately hard to trace, and fake pages copying the iPKO business login (Ważny komunikat. Dotyczy wszystkich klientów PKO BP – dobreprogramy.pl).

Other scams using the same tactics

Police have also warned about a rising number of fake text messages impersonating banks, public offices and courier firms. These messages typically claim that data must be verified, that a fee is owed or that a parcel cannot be delivered. As with the emails, the link leads to a copy of a real website with a form asking for personal or banking details (Masowa akcja oszustów. Wysyłają do Polaków wiadomości. Na to uważaj – wp.pl).

How to protect yourself

CERT Polska advises users to always open online banking by typing the bank's address manually, not by following a link in a message. Users should not enter login data on pages reached from unsolicited emails or texts, and should check the sender's address before opening any attachment or link.

Read also

• PKO BP warns customers about fake emails demanding data updates and identity checks
• CERT Polska Warns of Fake Complaint Emails That Deliver Malware
• Police warn of phishing links after rise in scams via messengers and social media