Delivery Scams Most Prominent Form of Smishing

guest · Aug 16, 2021

Delivery Scams Most Prominent Form of Smishing
August 16, 2021
https://www.infosecurity-magazine.com/news/delivery-scams-prominent-smishing/

Texts purporting to be from parcel and delivery companies are the most prevalent form of ‘smishing’ scams, according to new data provided to UK Finance by cybersecurity firm Proofpoint.

The data showed that over two-thirds (67.4%) of all UK texts reported as spam to the NCSC’s 7726 text messaging system, operated by Proofpoint, during the 30 days to mid-July 2021, were supposedly from delivery companies. The next highest category of scam texts was those pretending to be financial institutions and banks (22.6%).
Click to expand...

Over the 90 days to mid-July, the proportion of spam texts relating to parcel and package deliveries was lower, at 53.2%, while those purporting to be from financial institutions and banks were 36.8%.

Sarah Lyons, NCSC deputy director for economy & society, said, “Scammers and cyber-criminals regularly exploit well-known, trusted brands for their own personal gain, and sadly these latest findings bear that out.
Click to expand...

guest · Aug 16, 2021

Fraudsters Impersonate DPD in "Convincing" New Smishing Scam
August 10, 2021
https://www.infosecurity-magazine.com/news/fraudsters-dpd-smishing-scam/

Consumers have been warned about a new “convincing” smishing scam that impersonates international parcel delivery firm DPD.

The consumer group Which? provided insights into the smishing campaign, in which scammers attempt to trick recipients into giving away personal information, including payment details.
In the scam, consumers receive a text that states:

“DPD: We tried to deliver your parcel however no one was available to receive it. To arrange your redelivery, please proceed via: *link.”
The Which? researchers were then taken to a very convincing DPD copycat website requesting the user’s personal details to rearrange delivery and payment of a small ‘redelivery’ fee.
Click to expand...

Which? reported the scam text and website to DPD, who recommended that users download its ‘Your DPD’ app as a safe alternative to text and email notifications. The firm added: “We continue to stress that only emails sent from one of three DPD email addresses are genuine, these are dpd.co.uk, dpdlocal.co.uk and dpdgroup.co.uk.
Click to expand...

Which?: Don’t get caught out by this DPD text scam

We raise the alarm over a convincing SMS phishing – or ‘smishing’ – scam text claiming to be from DPD
Click to expand...

guest · Aug 22, 2021

Post Office is new prime target in UK parcel delivery phishing attacks
August 22, 2021
https://news.netcraft.com/archives/2021/08/22/rise-of-parcel-delivery-phishing-attacks.html

The coronavirus pandemic resulted in the closure of many bricks and mortar retail stores, forcing UK consumers to adopt online shopping more than ever before. This trend has largely continued in spite of many stores since reopening, as millions of consumers have become accustomed to the practical benefits of online shopping.

Along with this increased volume of online shopping came a new trend of phishing attacks where cybercriminals impersonate parcel delivery companies in an attempt to steal financial details from their victims. Royal Mail and Hermes were popular targets for these types of attack, but most new attacks now impersonate the Post Office.
Click to expand...

These attacks are typically disseminated via text message, informing the victim that they have missed a delivery. Sometimes the messages say up front that the recipient must rebook the delivery by paying a small surcharge.
Some messages instead use generic URL shorteners to take victims to the phishing sites, but this would not necessarily be viewed as suspicious by all recipients, as the use of URL shorteners is commonplace even in legitimate text messages.
Click to expand...

After impersonating the delivery company, some of these phishing attacks proceed to also impersonate one of several UK banks.
This gives the criminal an opportunity to steal additional credentials that are specific to each bank, such as online banking security codes and other tokens that would likely be used to gain unauthorised access to the victim’s bank account.
Click to expand...

Log in or Sign up

Delivery Scams Most Prominent Form of Smishing

guest Guest

guest Guest

guest Guest

Log in or Sign up

Delivery Scams Most Prominent Form of Smishing

guest Guest

guest Guest

guest Guest

Useful Searches