Phishing fraud: Forged SBB websites steal credit card data
Criminals lure SBB customers into a trap using deceptively authentic fake websites and steal sensitive payment data. Cybercrimepolice.ch warns of the scam.
Fake SBB ticket pages: Police warn of targeted phishing attack
As Blick reports, a new fraud scheme is targeting customers of the Swiss Federal Railways. Criminals create deceptively authentic copies of the official SBB website and offer forged train tickets at suspiciously low prices. Cybercrimepolice.ch has publicly warned against the fake platforms.
The forged pages are barely distinguishable from the original: design and layout largely match the genuine SBB website, with only the URL differing slightly. Travel times, routes and platforms appear authentic, and travellers can choose between first and second class – until they are redirected to a manipulated payment page.
There, the fraudsters demand sensitive information such as credit card number, expiry date, security code or Twint data. They subsequently use this information for illegal charges and further fraud.
The SBB stated to Blick that the situation is being closely monitored. Newly discovered phishing pages are reported immediately to the Federal Office for Cybersecurity. "We also recommend this approach to potentially affected customers", the company said. Media spokesman Reto Schärli added: "The SBB continuously develops security measures for login and payment processes and regularly raises customer awareness of cyber risks."
Source: Blick