It’s been a few weeks since we saw emails arriving in the boxes indicating that a package was awaiting recovery, but that to do so, you had to either pay a symbolic euro in customs fees, or connect to a site. to unlock it…
Finally, the phishing campaign is now transposed by SMS. We thus see a number of text messages arriving indicating that “Your package has been sent, please check and receive it” all accompanied by an internet address.
The shortened link then redirects to a site that immediately asks to update the mobile Chrome browser by downloading an APK file…
This file is actually an application that is responsible for recovering all the authorizations on the target’s smartphone and which will be responsible for collecting as much data as possible to send back to cybercriminals. Once enough data has been collected, the hackers will send a message usurping the user’s bank, telling them that their access has been blocked and that they must log in again with their credentials. This is where the latter recover access to bank accounts in order to use them.
Remember that it is important never to click on links associated with messages, even less when it comes to unknown senders. If you have fallen into the trap, the ideal is to contact your bank to automatically block any suspicious transaction and to uninstall the application from your smartphone, or even to install an antivirus.
.
The post the package received scam is back appeared first on Gamingsym.