Do you have a Santander Bank account? Government agency issues urgent warning
Not a day goes by without a new attack on Poles’ money. This time, cybercriminals set a trap for Santander Bank customers by launching fake login pages.
In summer, Poles get into the holiday mood and hot days weaken their alertness. Apparently, cybercriminals decided to take advantage of this, because number of attacks on bank customers in recent weeks has increased significantly.
Santander Bank: Fake Login Pages
CSIRT KNF, specialists in the security of the Polish financial sector, are sounding the alarm about another massive attempt to impersonate a bank. The fraudsters created fake login pages to the trading system Santander Bank. This bank is often targeted by criminals because its login page has an unclear address centrum24.pl. Instead, the scammers created websites with the following addresses:
- santander-online(.)pl,
- santander-bank(.)pl,
- santanderonlinebank(.)pl,
- sbanksecurity(.)pl.
Observant customers will of course immediately notice that this is not the correct address, but many others, seeing “santander” in the name can get tangled up.
The situation is made more difficult by the fact that the doctored pages faithfully resemble the original one.
Remember – accurate verification of the website address can protect you from losing your savings!
– warns CSIRT KNF.
For example, fake website addresses may appear as: search engine advertisingcan also be suggested in text messages or e-mailsalong with a request to pay an overdue invoice.
Whoever lets himself be deceived will fall into the trap of the deceivers. The criminals will gain access data for electronic banking – login and password – which will allow them to make further attempts to take over the account. Two-factor transaction authentication will also stand in their way, but criminals have developed a whole arsenal of means that allow them to bypass this protection. When they know the victim’s phone number, they can impersonate to a bank employee, send an SMS with another fake link or even force the victim to install a dangerous application on their smartphone.
