Lord777
Professional
- Messages
- 2,577
- Reaction score
- 1,562
- Points
- 113
With the help of a bot, scammers find access to databases on the Darknet where user information is stored.
Attackers have come up with another way to steal bank card data. This time the Telegram messenger is used for this. CyberNews analysts told about it.
It is reported that a bot called OTP Bot has appeared in the application, which is trained to receive from its victims the data of their bank cards, as well as passwords for confirming certain operations sent by banks.
In its dialogues with users, the bot uses data found on the darknet or in leaked databases. In this case, the most popular fraudulent scheme is as follows: the bot invites the victim to connect a bank card to a mobile account to make automatic payments. After obtaining the necessary information, cybercriminals spend money from the cards to buy gift cards in regular stores.
At the same time, the attackers do not come into direct contact with the victim. To find out the one-time code, the bot calls the number of the selected person and asks for the required combination of numbers. It is known that, in addition to financial data, fraudsters are able to steal passwords and login information for various services in the same way.
Attackers have come up with another way to steal bank card data. This time the Telegram messenger is used for this. CyberNews analysts told about it.
It is reported that a bot called OTP Bot has appeared in the application, which is trained to receive from its victims the data of their bank cards, as well as passwords for confirming certain operations sent by banks.
In its dialogues with users, the bot uses data found on the darknet or in leaked databases. In this case, the most popular fraudulent scheme is as follows: the bot invites the victim to connect a bank card to a mobile account to make automatic payments. After obtaining the necessary information, cybercriminals spend money from the cards to buy gift cards in regular stores.
At the same time, the attackers do not come into direct contact with the victim. To find out the one-time code, the bot calls the number of the selected person and asks for the required combination of numbers. It is known that, in addition to financial data, fraudsters are able to steal passwords and login information for various services in the same way.