500 PLN for filling in the vaccination questionnaire? KNF warns. This is a new scam

The last few weeks have been a real plague of more phishin scams. Almost every day we hear about new ideas of criminals impersonating well-known companies (“Orlen” scams, institutions (or ministries) or even politicians (). Now we are dealing with another phishin attack.

PLN 500 for completing the survey. It’s a scam

This time, criminals take advantage of the hot topic of vaccination. As the Computer Security Incident Response Team of the Polish Financial Supervision Authority (KNF’s CSIRT) warns, a new scam is circulating on the web in which cybercriminals urge you to fill out a vaccination survey.

The website, crafted by criminals, is to imitate the appearance of government websites and encourages them to win a prize of PLN 500. Supposedly, the questionnaire was created to “improve the quality of service”, and immediately after completing it, the state would transfer money to our payment card.

Be warned against bogus COVID-19 vaccination surveys! Criminals promise PLN 500 for each completion of the survey. Unfortunately, at the end of the form, we are redirected to a website that we know, phishing data for payment cards

– the Polish Financial Supervision Authority (CSIRT) warns.

It is worth returning attention that the authors of the website do not specify what vaccination is mentioned (against which disease) and the quality of which “service” they want to improve. It is also not difficult to notice that the website was prepared extremely carelessly. This is good news, as perhaps fewer people will fall for the scam.

We invite you to take part in a small survey. It was created solely to improve the quality of service. We want us to know your opinion on the services provided. You will receive PLN 500 on your payment card for the ride

– we read on the crafted website of the scammers.

Suspicions are raised not only by the website address, but most of all by the website content translated in the online translator. The website is full of stylistic errors, and many words have been incorrectly translated (eg “physical face” in the upper left corner). The whole thing sounds bad enough that it should arouse suspicion in any potential victim.

However, should anyone fall into deception, after completing the fake survey, the scam website will take them to a crafted page pretending to be a payment gateway. There, the victim is asked to provide the card number, owner name, and CVV code for the purported credit transfer. In fact, providing this data is tantamount to sending it to fraudsters and, of course, will result in the card being cleared.

As Paweł Piekutowski from the Polish Financial Supervision Authority’s CSIRT reports on Twitter, this is not the first time that criminals have used the subject of the coronavirus by impersonating a row. In previous campaigns – which were also aimed at stealing money from payment cards – they promised compensation for those affected by the pandemic.