About the author
–
–
CERT Polska once again warns against fraudsters trying to impersonate Allegro. This time, they want to persuade victims to install malware under the guise of an application that confirms the installment purchase.
Last week, experts from CERT Polska warned against a clever attempt of a scam, which Gmail’s anti-spam mechanisms did not detect as a malicious message. Fraudsters sent out messages informing about activating the “Smart!” service free for another month. Allegro users who clicked on the link in the e-mail were transferred to a fake website. There, their login details were scammed.
This time we have a very similar situation, but much more dangerous. Fraudsters pretend to be Allegro and send e-mails titled: “Confirmation of sending the application for a loan for purchases Raty Od.nowa”. The pattern used by the scammers looks almost perfect and is hard to distinguish from a real email. However, we do not see the Allegro.pl domain in the sender’s address, which should raise suspicions.
According to the fraud reported last week by CERT Polska, the victim is led to the Allegro-credti website[.]info. We come across a fake Allegro website that looks just like the original. Scammers try to convince the victim that they are just taking a loan for a given product. In addition to the shipping details of an unknown person.
Probably some users will believe it and try to find a solution to the situation. The scammers have placed this option at the bottom of the page, under the “cancel request” button. After pressing it, a message appears suggesting that we need to open the website in the mobile version from the smartphone and install the “Allegro Loans” application. As you can guess, there is malware hidden under it, used to take control of the smartphone and steal from the bank accounts of victims.
– .
