Beware! These online scams may target you this festive season
As the festive season kicks in, cybersecurity experts are raising alarms about a spike in online scams. Among these scams are a fake IRCTC app and a bunch of frauds that are particularly aimed at consumers during this time. The heads-up comes from Quick Heal Technologies, which has pinpointed some major threats that cybercriminals are using to exploit different platforms and trick innocent folks.
Fake IRCTC app steals credentials
Cybersecurity experts have uncovered a fake app posing as the official IRCTC platform. This sneaky app can steal your Facebook and Google account credentials, snatch codes from Google Authenticator, track your GPS location, and even record videos using your device's camera. The data gathered by this spyware is then sent to a command and control (C2) server for some serious exploitation.
Scammers are exploiting banking rewards
Scammers are getting crafty by using the idea of banking rewards to trick you into downloading harmful APK files. They employ some sneaky social engineering techniques and create a false sense of urgency with messages like "Available only today" or "Last day!" to reel in their victims. Once you download these harmful files, they can lead to a whole lot of trouble, including financial loss, stealing your personal data, phishing for your bank details, and even unauthorized transactions.
Beware of fake shopping sites
With the festive season in full swing, scammers are creating fake domains that look like genuine shopping sites. They're sending out malicious links disguised as festival gifts via WhatsApp, SMS, and email. If you click on these links, you'll find yourself on a form asking for your personal details and access to your contacts and messages. It's a sneaky way for them to grab your information without you even realizing it.
Gift card fraud
Scammers are targeting e-commerce customers with fake messages claiming they have won prizes or gift cards. These messages, sent via SMS, email, or social media, often say, "Dear customer, congratulations! You have won..." Users are then prompted to click links to claim their prizes, leading them to malicious websites that collect personal data.
Income tax refund scam
A new scam involves contacting individuals about fake tax refunds. The scammers use SMS, WhatsApp, or email to pressure victims into updating their account details to receive a refund. Messages often state, "Your income tax refund of Rs. XXXX has been approved. Please verify your account number XXXX," which can result in unauthorized access to victims' accounts.
How to protect yourself from these scams?
To stay safe from these scams, always be cautious of unsolicited messages that promise you rewards or require urgent action. Avoid downloading apps from unknown sources, and double-check any URLs before clicking on them. It's also smart to keep your devices updated with the latest security patches, and use trustworthy antivirus software for extra protection.