Cybersecurity firm Armorblox has reported a new scam on WhatsApp. Credentials, passwords from wallets, and even files stored on the computer can become the target of attackers.
Fraudsters work in the following way. Initially, the user receives a mailing list, and in an email purporting to be a notification from the support team, it is proposed to enable a "voice message". By clicking on the link provided, the victim is redirected to a phishing resource that infects the PC with the JS/Kryptic Trojan.
To prevent the victim from guessing about the deception, scammers also copy the captcha input form with confirmation that the user is not a robot. When you click on the corresponding button, the browser will offer to download virus software disguised as a useful program to optimize computer performance, and scripts will also be downloaded to display advertising materials from various resources.
Armorblox specialists warn that the creators of the mailing list and the entire scheme as a whole are not related to the real developers of the messenger. It is also noted that voice messages in the application are loaded automatically, so the company will not inform the user about the receipt of the audio file by sending it to email. In addition, the phishing message does not have a messenger logo, which should also make an attentive user doubt.
Fraudsters work in the following way. Initially, the user receives a mailing list, and in an email purporting to be a notification from the support team, it is proposed to enable a "voice message". By clicking on the link provided, the victim is redirected to a phishing resource that infects the PC with the JS/Kryptic Trojan.
To prevent the victim from guessing about the deception, scammers also copy the captcha input form with confirmation that the user is not a robot. When you click on the corresponding button, the browser will offer to download virus software disguised as a useful program to optimize computer performance, and scripts will also be downloaded to display advertising materials from various resources.
Armorblox specialists warn that the creators of the mailing list and the entire scheme as a whole are not related to the real developers of the messenger. It is also noted that voice messages in the application are loaded automatically, so the company will not inform the user about the receipt of the audio file by sending it to email. In addition, the phishing message does not have a messenger logo, which should also make an attentive user doubt.
Login or register to post comments
Comments 0