The fraud is staged with the fraudster pretending to work for a well-known company via SMS informs that an order has been placed in the victim's name and that they just want to make sure that the order is correct. In the text message, the intended victim is asked to contact the "company" at the phone number provided.
When the victim calls the number, they confirm that an order has been placed but that they will cancel it. They then ask the victim which bank he/she uses and inform that they will transfer the call to the bank's security department because their details have been "leaked on the internet".
A crony takes over the call and says he works at the bank's fraud department and since the victim's details have been "leaked" must temporarily move the victim's savings because the bank has to "clean" the accounts of the virus. The victim is asked to connect to the "bank" remotely, then the victim is "assisted" with instructions on how to move the money to a temporary account while the cleanup is done. As soon as the transaction is completed, the fraudster interrupts both the phone call and the connection. What remains is a confused and despairing elderly person who does not understand what just happened.
These "clusters" of young people who carry out these scams are located in Turkey, Spain, Lebanon, Dubai etcetra. For a long time they have been able to act undisturbed. Now a White Hat has hacked several of these cluster's devices.
No comments:
Post a Comment