Bob:
I just ran into a situation, a phone call, a person introduced himself as a bank employee and said that a third-party phone connected to my account and tried to transfer money, this attempt was blocked. Further, the "specialist" suggested changing the antivirus and installing a third-party application. It is my understanding that this app is remotely monitoring your screen, something else is possible.
Accordingly, you can access all the functions and settings and applications of banks. In the middle of the conversation, I hung up and called the bank back, as I was alarmed by the third-party software that was offered to be installed, but everything was very believable, right down to the background noise of other telephone operators sitting around. Be careful!
Financial Culture Expert:
The scammers tried to gain access to Bob's account using a legal program that allows the main user or an outsider to connect to a phone or computer and control it remotely. Typically, this application is used in companies for remote technical support of employees - for example, to configure equipment or troubleshoot problems.
The attacker used psychological tricks to instill confidence in Bob. He introduced himself as a bank employee and tried to convince that he was acting in the interests of the client's safety. In fact, the fraudster was going to get access to Bob's phone. In particular, he could find out the password from his mobile bank, gain access to read one-time passwords from SMS and steal money.
At the same time, it is difficult for a real bank security service to recognize such fraud and promptly suppress it. After all, the user voluntarily downloads a legal program that gives the fraudster remote access to his device. As a result, the attacker, in fact, acts with the hands of the owner of the phone.
Fraudsters can use the technology of number spoofing, so that the official bank number is displayed on the user's phone. An attacker can list a person the latest transactions on his card, give his address and other personal information. Scammers get all this information from databases they buy on the black market.
How to protect your accounts from fraudsters?
I just ran into a situation, a phone call, a person introduced himself as a bank employee and said that a third-party phone connected to my account and tried to transfer money, this attempt was blocked. Further, the "specialist" suggested changing the antivirus and installing a third-party application. It is my understanding that this app is remotely monitoring your screen, something else is possible.
Accordingly, you can access all the functions and settings and applications of banks. In the middle of the conversation, I hung up and called the bank back, as I was alarmed by the third-party software that was offered to be installed, but everything was very believable, right down to the background noise of other telephone operators sitting around. Be careful!
Financial Culture Expert:
The scammers tried to gain access to Bob's account using a legal program that allows the main user or an outsider to connect to a phone or computer and control it remotely. Typically, this application is used in companies for remote technical support of employees - for example, to configure equipment or troubleshoot problems.
The attacker used psychological tricks to instill confidence in Bob. He introduced himself as a bank employee and tried to convince that he was acting in the interests of the client's safety. In fact, the fraudster was going to get access to Bob's phone. In particular, he could find out the password from his mobile bank, gain access to read one-time passwords from SMS and steal money.
At the same time, it is difficult for a real bank security service to recognize such fraud and promptly suppress it. After all, the user voluntarily downloads a legal program that gives the fraudster remote access to his device. As a result, the attacker, in fact, acts with the hands of the owner of the phone.
Fraudsters can use the technology of number spoofing, so that the official bank number is displayed on the user's phone. An attacker can list a person the latest transactions on his card, give his address and other personal information. Scammers get all this information from databases they buy on the black market.
How to protect your accounts from fraudsters?
- If a bank employee calls you and informs about the threat of fraud, hang up and call the bank back. It is better to dial the phone number (it is indicated on your card and on the official website of the bank) manually: if scammers called, a callback can connect you with them.
- Do not share personal data, card details and secret information to anyone: secret word, CVC / CVV-code on the back of the card, codes from SMS and PIN-codes. The bank may not return the money to you if it turns out that you yourself gave the fraudsters secret data.
- Don't download third-party apps to your phone at the request of strangers.
- Install antivirus software on all gadgets you use.
