The Romanian post office warned on Friday that it is facing a wave of complaints from citizens who are at risk of becoming victims of cybercriminals.

SMS phishingPhoto: Prudencio Alvarez / Dreamstime.com
  • “Phishing activities using the company’s name have intensified recently. Using SMS or e-mail, cybercriminals attack the accounts and personal data of Internet users.”, – reports the Romanian Post.

How SMS fraud works

The company describes one of the methods used by hackers recently:

  • “Cybercriminals send an SMS from a Romanian phone number telling the recipient that they should receive a package, but the address is incorrect.
  • Then a link containing the words “mail”/”mail” and/or “Romanian” is indicated. After clicking on the corresponding link, personal data (postal address, e-mail address, phone number) is requested and a payment interface similar to any other portal designed for online payments is created. Through him, they ask for a symbolic amount.
  • After entering the data required by the interface (card number, validity period, cardholder, security code), the recipient receives a bank code. This interface actually hides hackers who enter card data into a certain application, thereby stealing money.
  • From now on, cyberthieves will be able to make online payments at POS terminals or withdraw money from ATMs without needing the recipient’s PIN code.
  • Even banks’ own security phrases are used, for example: “don’t tell anyone…”.
  • At the moment of entering the code sent by the bank, the money disappears from the card.”, the Post warns.

The company advises those who receive such messages not to open these messages, mark them as spam and especially not to click on the link in the received message.

The Post Office emphasizes that it does not require customers to provide personal details, confidential banking information related to personal accounts, card numbers or PIN codes, and to make online customs payments.

Photo credit: Prudencio Alvarez / Dreamstime.com