Cybercriminals are using fake bank alerts and malware to steal sensitive information in this phishing scam.
Imagine you open your inbox and receive an urgent message from your bank, warning you that your account will be restricted unless you confirm your information right away. The email has your bank’s logo and color scheme, and includes a link to update your information. Because the message looks real and you don’t want to lose access to your money, it’s tempting to select the link.
But this email is actually a phishing scam! If you select the link, you’ll be prompted to download a tool that claims to protect your account. But that download actually installs malware that lets cybercriminals remotely access your device. This malware can allow them to view your mailing address, bank account details, and other information that they can use right away to steal your identity!
Tips to Stay Safe
Follow these tips to avoid falling victim to this phishing scam:
- Verify bank alerts by logging in directly to your bank’s official app or website, never through a link in an email.
- If you’re ever unsure whether a bank alert is real, contact your bank using the phone number on the back of your debit or credit card.
- Always stop and think before you act! Cybercriminals rely on alarming messages to get your attention and force you to make fast decisions.
Stop. Look. Think. And don’t be fooled.
Tips of the Week Brought to You By Our Partners at KnowBe4
KnowBe4 is the world’s most popular integrated platform for awareness training combined with simulated phishing attacks. Let Keller Schroeder show you how KnowBe4 has helped thousands of organizations just like yours manage the continuing problem of social engineering. Contact us today to learn more.
