Next day he received a call

[rakhirhif8963]

Sergey fell ill with coronavirus. Having learned about the positive test, the young man decided to share a screenshot of it on Instagram. He accompanied the post with the hashtags: “quarantine”, “covid19”.

The from an unknown number. Sergey thought it was a doctor and did not hang up. He heard noise in the receiver, as if from a call center. The caller introduced himself as a police officer in the field of economic crimes. He said that the previous evening a woman had tried to withdraw money from a bank branch with a power of attorney in his name. Allegedly, she relied on the fact that Sergey was sick with COVID-19 and could not do it on his own. Sergey lied that he did not have a card from this bank. After which he heard short beeps.

Using a relevant reason is one of the main tricks of manipulation; to find such “hooks,” attackers actively use social networks, in particular, they monitor pages and hashtags.

— It turns out that the social engineering attack in this colombia mobile database is based on information that the user himself distributes on the social network?

— That's right! We are witnessing the next step in the evolution of fraud. Criminals are using a targeted individual scenario, designed for a specific person, and at the same time they combine it with already known methods of bank fraud. This leads to the fact that such a two-move strategy has a very high level of danger.

Another type of such attacks is when attackers monitor the current situation with the pandemic and quickly come up with suitable scenarios. Various types of "covid payments" and "effective drugs", for which you only need to provide the card number and its code, look very attractive.

— And again, the attack begins with studying what the user has written about himself?

- That's right! Therefore, limit your social circle to those people