CERT Polska warns against internet fraud. "New Theme"

The CERT Polska team, operating within NASK structures, warns: cybercriminals are constantly modifying their methods to extort data from bank customers.

The latest wave of attacks is aimed primarily at entrepreneurs. Fraudsters send e-mails in which they refer to regulatory obligations and the need to urgently update company documentation. The message contains a link leading to a page that looks confusingly like an online banking service.

Purpose: to extort login details

The criminals' mechanism of action is simple but effective. By clicking on the link sent and entering login details on the fake website, fraudsters can take control of the victim's bank account.

This is another version of the already known phishing campaign - previously, cybercriminals used topics related to currency accounts, new rules for transfer authorization or updating customers' personal data.

How to protect yourself against cyber fraudsters?

CERT Polska reminds about the basic safety rules:

Always use electronic banking by entering the bank's website address or using the official mobile application,

Be especially careful with messages that cause time pressure or threaten to block your account,

Never click on suspicious links or provide your login details on the sites they lead to.

Report a suspicious message

If you receive a suspicious message, report it to CERT Polska via the form on the website incident.cert.pl.

You can also use the "Safely online" service in the mObywatel application.