This time, cybercriminals targeted Orange network customers, especially people who pay (or receive) subscriptions from the operator. However, everyone should be careful. At first glance, the messages even look credible.
CERT Orange Polska warns against a new scam
According to reports, an intensified SMS campaign by cybercriminals has been observed since the weekend. Poles receive thousands of messages whose senders impersonate the Orange network and inform about the expiration or suspension of an unspecified subscription. This time the messages are written correctly, contain Polish characters and at first glance seem quite reliable. It’s easy to imagine that someone, in the midst of everyday duties, will click on the link and end up on a fake scam website.
“ORANGE: Your subscription has been suspended. Renew it via: orange-subskrypcja-pl.com” – we read in the text message. However, it is worth paying attention to two things. First of all, messages come from numbers starting with +33, i.e. the area code of France. “Our messages come in the lion’s share of cases from a subtitle. Orange Polska will certainly not send you information from a regular number with the French distinction +33” – writes the CERT Orange Polska team.
Secondly, fraud can be detected by the domain where the website linked in the SMS is located (ending “-pl.com”). Meanwhile, the Orange Polska network operates in the Polish “.pl” domain. The fake link also does not contain dots, but a hyphen. Cybersecurity experts point out that the fraudsters’ domain is located at a Moldovan supplier, and the fake websites using it impersonate companies in various parts of Europe.
Source: Gazeta

Mabel is a talented author and journalist with a passion for all things technology. As an experienced writer for the 247 News Agency, she has established a reputation for her in-depth reporting and expert analysis on the latest developments in the tech industry.