Dear Customer,
Official sources report that in October of this year. New attempts to commit fraudulent transactions against customers of the “Client-Bank” system of one of the Russian banks were revealed. On the name of the Bank, FIiP ROST to send the worldwire of rgess with an air waybill was sent through the delivery service, in which the Bank’s address was indicated as the sender.
At the same time, the fraudsters, posing as employees of the Bank’s Customer Support Service, called the employees of the client organizations responsible for making settlements through the Client-Bank system, were interested in receiving envelopes and recommended updating as soon as possible after receiving a software update envelope. FIire Grow envelopes of worldwaide exprss and content of letters are of the same type:
1. Paper opaque postal envelope. Sender's stamp on the envelope: "Bank Address".
2. A letter with a form similar to the Bank's letterhead, which states “about the need to renew the certificates of CIPP AC Client-Bank.”
3. Instructions for renewing certificates of CIPU AS Client-Bank.
4. D-disk with the Bank's logo in a soft envelope.
The software recorded on the CD-ROM was specially created by the attackers for stealing the confidential information of the Client, the secret component of the EDS key of the director of the enterprise or the person authorized to sign financial documents) and using it to generate payment documents signed by the EDS from the enterprise and transfer them for crediting funds to personal accounts of nominees. We ask you to be vigilant and not succumb to the tricks of fraudsters. If such a situation arises, please contact the Bank% bankname% immediately. Additionally, we remind you of the basic rules of safe work, which you will find in the attachment.
Regards,% bankname%
Source: https://habr.com/ru/post/131597/
All Articles