Otto
Advanced
- Joined
- 22.09.20
- Messages
- 104
- Reaction score
- 423
- Points
- 63
Cyber fraudsters use a devilish cocktail of social engineering, SIM swapping and remote access software. Using this kit, attackers devastate users' bank accounts.
In total, the victims of the criminals, of whom there are only three to date, lost more than $ 350,000. In all cases, identical methods were used.
It all started with a fake sale of a well located apartment at a low price. The fraudsters explained such a tempting offer by the urgent need for money. In order for the victims to believe in the accuracy of the information, the attackers offered to show additional photographs and videos of the living space.
To transfer media files, the user was persuadedinstall AnyDesk, a remote access application. Since this is a completely legitimate tool that the victim downloaded from the developer's official website, it was difficult to suspect that something was wrong.
The catch was that the criminals kept access to the user's computer even after the files were transferred. They were looking for passwords, documents, personal data.
The main goal is to steal credentials from bank accounts, but fraudsters often faced a serious barrier - two-factor authentication (2FA). And this is where the SIM Swappingtechnique helped , with the help of which attackers could receive text messages and calls intended for the victim.
In total, the victims of the criminals, of whom there are only three to date, lost more than $ 350,000. In all cases, identical methods were used.
It all started with a fake sale of a well located apartment at a low price. The fraudsters explained such a tempting offer by the urgent need for money. In order for the victims to believe in the accuracy of the information, the attackers offered to show additional photographs and videos of the living space.
To transfer media files, the user was persuadedinstall AnyDesk, a remote access application. Since this is a completely legitimate tool that the victim downloaded from the developer's official website, it was difficult to suspect that something was wrong.
The catch was that the criminals kept access to the user's computer even after the files were transferred. They were looking for passwords, documents, personal data.
The main goal is to steal credentials from bank accounts, but fraudsters often faced a serious barrier - two-factor authentication (2FA). And this is where the SIM Swappingtechnique helped , with the help of which attackers could receive text messages and calls intended for the victim.