New trick warning: A series of bank numbers such as ACB, Sacombank … were impersonated to send fraudulent messages

Recent days, many users are sharing on the top banks such as ACB, Sacombank … get a message that says that “we detect your account currently consuming country Foreigner. If you do not have to register the content, please click https: // vn-‘bank name’.com to cancel payment “ . These messages may seem real but they are actually phishing messages.

Not only that, other banks such as Eximbank, TP Bank … are also becoming targets of this new sophisticated scam.

The special thing here is that the above messages come from prefixes of the Bank, not any other number. Even more sophisticated than these messages has even entered the real messages of banks.

Actually, this new scam is so sophisticated, many people have been deceived because these messages are also combined with real messages from the Bank.

When you click on the links above, the interface that opens will resemble the real Bank interface, but of course it is fake, if you are not alert and enter your account information, you will risk losing your money. There have been many users sharing about being cheated and losing money, some people are more fortunate to see that the link they clicked is “not secure”, so they called to confirm in advance with the Bank.

However, not everyone is sober enough, especially those who use international payment cards, so rushed to click on the date and lost money. This makes people very confused when “Venerable practitioner,” Venerable practitioner “is confused and cannot be distinguished because it all comes from the text message with the number of the Bank.

In essence, this is a sophisticated and extremely dangerous scam because the messages are sent with the correct name of the Bank that should only be used by the brand owner (SMS Brandname).

According to research, there are the following reasons why the Bank’s SMS Brandname system was compromised:

In the first scenario, the bad guy will use his own technique to get in the middle of sending / receiving SMS, “catch” the packets sent by the carrier to the victim, edit the content and continue sending to the customer. This is the least feasible way.

In the second scenario, the hacker attacks directly on the system of the SMS OTP provider for the bank and manipulates the content sent to the user.

In the third scenario, hackers use fake documents, register another SMS switchboard with the same name as banks in Vietnam, register in Vietnam or abroad to send messages to users. At this point, phishing messages will be gathered by the phone into a thread of messages under the name of the bank, making the victim unable to distinguish what is real or fake.