Mobile Banking Users Targeted in SMS Phishing Campaign

guest · Feb 18, 2020

Mobile Banking Users Targeted in SMS Phishing Campaign
Researchers Say Attackers Targeted American and Canadian Banking Customers
February 18, 2020
https://www.inforisktoday.com/mobile-banking-users-targeted-in-sms-phishing-campaign-a-13735

Cybercriminals targeted mobile banking users by sending malicious SMS messages to their smartphones as part of a phishing campaign to steal account holders' information, including usernames and passwords, according to the cybersecurity firm Lookout.

More than 3,900 mobile banking app users of several Canadian and American banks fell victim to the SMS phishing attacks, which started in June 2019 and apparently recently ended, researchers at Lookout say in their new report.
Those affected included customers of Scotiabank, CIBC Bank, RBC Royal Bank, UniBank, HSBC, Tangerine Bank, TD Bank, Meridian, Laurentian, Manulife, BNC National Bank and Chase, according to the report.

The Lookout researchers note in their report that smartphone users are more susceptible to phishing attacks because the features, functionality and screen size of these devices make it more difficult to discern if the message is fraudulent or a website link is fake, according to the report.
Click to expand...

SMS as Malicious Tool
The phishing campaign that the Lookout researchers describe in their report used malicious SMS messages to lure victims into clicking on links that would take them to fake login pages of banks. These fake sites mirrored the real mobile banking sites of these firms, including using the same layout and sizing, according to the report.

Once a targeted victim reached the fake site, they were asked to input their username, password and other details, which were then collected by the attackers, the researchers say.

"Since mobile users are typically on the move and less likely to scrutinize the authenticity of an SMS message, text messages have become an attractive new attack vector," the researchers say
Click to expand...

Lookout: Lookout Phishing AI provides an inside look into a phishing campaign targeting mobile banking users

guest · Jul 10, 2020

HSBC SMS Phishing Scam Targets UK Victims
July 9, 2020
https://www.cybergen.com/uncategorized/hsbc-sms-phishing-scam-targets-uk-victims/

People in the UK are being targeted by a new phishing scam designed to trick victims into handing over details of their HSBC bank account.

The scam, discovered by litigation specialists Griffin Law, begins with a bogus text message that claims to be from the banking and finance giant informing the receiver that a new payment has been made through the HSBC app on their phone.
The user is then told that, if they are not responsible for the payment, they should visit the site “Security.hsbc.confirm-systems.com” to validate their bank account, before being directed to a fake landing page which asks for their username and password, followed by a series of verification steps.

“Increasingly, we are seeing examples of cyber-criminals using the branding of major banks to create realistic-looking fake websites, in order to extract personal financial information.”
Click to expand...

Log in or Sign up

Mobile Banking Users Targeted in SMS Phishing Campaign

guest Guest

guest Guest

Log in or Sign up

Mobile Banking Users Targeted in SMS Phishing Campaign

guest Guest

guest Guest

Useful Searches