Fraudsters use the image of the government application mObywatel. This is how they extort data

Fraudsters are constantly inventing new methods of committing crimes. By impersonating specific people or institutions, they have a greater chance of success. This is because a text message or e-mail sent from an address resembling the government one inspires trust. And it is this similarity that fraudsters use in a new phishing campaign, where they use the image of the mObywatel application, reports .

Fraudsters use the image of a government application

Fraudsters send text messages informing them that there is a message waiting in the application’s inbox. Unfortunately, the link in the uploaded content leads to a website where bank details are stolen. “The link attached to the message directs you to the citizen domain[.]cloud, where – under the guise of logging in to the application – access data to electronic banking is extorted. The information obtained in this way can then be used to steal money stored in the victim’s bank account,” warns NASK.

A profile on portal third person, i.e. thinking that, for example, advertisements affect others more than they affect me, also applies to disinformation, which weakens our vigilance. “The third-person effect is often used in the context of the media. We believe that others, not us, are influenced by advertisements, or that we are completely immune to election campaigns conducted in the media. The same applies to disinformation. Many of us may believe that this problem does not concern them because they can distinguish it or they believe that there is no disinformation in the media they use. Such thinking weakens vigilance and makes it easier for us to believe in false content. Let us remember that disinformation is very democratic and interesting in fact, everyone,” we read.

There are three ways to report any suspicious text messages, websites or emails that cause concern. The first is to send information to pod experts number 799 448 084. You can also complete the form on the website incident.cert.pl or send e-mail to cert@cert.pl.