MAMONT and fake letters: how Ukrainians are being scammed for money
28 January 17:27
Fraudsters are coming up with new schemes to cheat Ukrainians out of their money, as well as using old ones. As usual, they are also “cheating” children out of their money. A new virus called MAMONT is spreading rapidly on Telegram, which allows attackers to access banking applications by stealing personal data. In addition, fake letters on behalf of gas companies have begun to be sent en masse. What do you need to know to avoid falling into the trap of scams, Komersant ukrainskyi found out.
The attack scheme is very simple. Unknown persons send an intriguing message on Telegram: “Is that you in the video?” and a file with the .apk extension . The most interested users open it without even realizing the danger. Once the victim installs the malware under the guise of a video, the attackers gain access to the smartphone. They can log into banking applications, empty accounts, and download an archive of photos, which they can then use to blackmail the victim. In addition, once the virus is downloaded, the file is sent to all the victim’s contacts. This is why the virus was named MAMONT.
IT experts warn that a file with the .apk extension is typical for applications, but not for videos.
“To avoid problems with viruses, it is best not to open files from unknown senders at all. But for additional protection, you should install an antivirus on your phone. If a virus is downloaded, you should warn people from your contact list. It is also recommended to set up privacy settings in Telegram and limit the ability to send you messages to friends only. In any case, the spam messages themselves are safe – just delete them. The main thing is not to open unknown files and not to follow questionable links, such as “vote for your son or daughter”,
– cybersecurity specialist Volodymyr Usatov tells .
Читайте нас у Telegram: головні новини коротко
Fake emails on behalf of gas companies
In addition to the MAMONT virus, fraudsters are sending fake letters to entrepreneurs on behalf of Gas Distribution Networks of Ukraine LLC demanding that they allegedly sign contracts, pay bills, or follow links to confirm acts of work performed. This was reported by the Center for Countering Disinformation.
In fact, these messages are fake and contain phishing links that are dangerous for personal data. Gazmerezhi stated that their official email address ends with grmu.com.ua, and all other variants are fake.
Children in the crosshairs of scammers
If adults fall for fraudulent schemes, children become even easier prey. Fraudsters actively use their gullibility, playing on their emotions.
- Fraud through transfers. Fraudsters gain the child’s trust and ask to make a small transfer through the parent’s banking app, promising to return the money.
- Scanning bank cards. Scammers may ask a child to take a picture of their parents’ bank card from both sides or send a code via SMS, claiming that it is a “surprise” for their parents.
- Fake games and updates. Attackers create copies of popular games or fake updates, disguising them as official requests. They offer favorable conditions, such as free access to premium features. A child can subscribe to a paid service thinking it is free, which leads to regular charges from the parents’ account.
Parents often find out that their child has become a victim of fraud when a large amount of money disappears from the account. To protect your child from the dangers of online gambling, follow these rules:
- Do not link bank cards to devices used by your child.
- Limit purchases in online games and monitor your child’s spending.
- Turn on email alerts about activities in your child’s game accounts.
- Check if payment is required before downloading a game or updating it.
- Teach your child the basics of online privacy.
- Explain that your child should consult you before downloading, subscribing, following links, or adding new friends.
Читайте нас у Telegram: головні новини коротко
Author: Alla Dunina