InPost phishing: CERT Poland warns of fake SMS messages stealing personal data
CERT Poland has identified a scam campaign in which criminals impersonate the InPost courier company. Fake SMS messages direct victims to pages designed to steal personal data and payment card information.
Fake SMS messages from "InPost" – cybercriminals stealing card data and personal information
According to RMF24, on Tuesday the CERT Poland team warned of a new phishing campaign in which criminals impersonate the InPost courier company. In the distributed SMS messages, senders inform recipients of an alleged need to confirm parcel data and encourage them to click on an attached link.
The link directs users to a fraudulent website designed to persuade them to enter personal data and payment card information. The obtained data can – as CERT Poland indicates – be used by cybercriminals for subsequent, more targeted attacks.
Experts recommend checking the address of the webpage to which an SMS message redirects. Parcel status should be verified exclusively through the official InPost application or on the carrier's website. Suspicious messages can be reported to CERT Poland by sending an SMS to the number 8080.
CERT Poland is a computer incident response team operating as part of the research institute NASK. The institute accepts reports concerning suspicious events on the internet and warns users of new threats.
Source: RMF24