CERT Polska Warns of Fake Complaint Emails That Deliver Malware
Scammers are sending emails that pose as customers complaining about a damaged order and link to supposed photos or videos. CERT Polska says the link actually delivers malicious software that can give attackers access to the victim's device.
How the scam works
Fraudsters are sending e-mails that look like complaints from buyers about goods they have received. The message says the product arrived damaged and includes a link that supposedly leads to photos and videos documenting the problem (Fala maili od oszustów. Można stracić dane. Na to zwracaj uwagę – wp.pl).
What the link does
CERT Polska's analysis found that the link and its attachment carry malware instead of the promised files. The software may allow criminals to access the system on the victim's device. Biznes Info reports that clicking such a link can lead to fake software being installed on a computer or phone, and that the consequences can be serious (CERT Polska ostrzega przed nową falą oszustw. Uważaj na takie maile, można stracić pieniądze | Biznes Info – biznesinfo.pl).
Scale and goal
CERT Polska has tracked a campaign in which criminals impersonate customers who report problems with ordered items. The aim of these attacks is to steal personal data and money from Poles.
Caution with unexpected e-mails
The warning applies to any unexpected message that contains a link, including those presented as complaints about an order. Recipients should check the sender and the actual content before opening anything from such an e-mail.
Sources
- #CERTPolska
- #Malware
- #Phishing
- #EmailScam
- #Cybersecurity
- #Poland