A wave of fake news from a popular website. They want to extort data

Imagine that you are selling a car and you are approached by people impersonating the website’s security team and wanting only one thing – to verify your account by entering your online banking data. CSIRT KNF warns against a new wave of attacks on users of the OtoMoto portal.

Be careful and don’t get robbed.

If you receive a message from the OtoMoto portal that contains a pdf file. about account verification, stop for a moment and do not take any action. It is quite likely that you have just become the target of an attack by cybercriminals. Do not click on the link or download any file.

Dear User, in order to continue using our services, you must confirm your identity. This is important to ensure the security of your account. Important: If you do not complete verification within the allotted time, access to your account will be completely blocked.

The document, at first glance, looks very professional. It contains information about the alleged need to confirm your identity in order to continue using the platform. After clicking the “Go to verification” button, the user will be redirected to a page with a list of banks. Immediately after selecting your bank, a page will appear imitating a real login page, which is intended to extort electronic banking details from us.

Let’s not fall for the tricks of fraudsters. Let’s not make their lives easier.