Hackers are spinning up fake chatbots to trick you into handing over your data

Date:
Thu, 19 May 2022 13:24:01 +0000

Description:
Think you're chatting with a bot? No, you're getting your data stolen.

FULL STORY ======================================================================

Criminals appear to have taken phishing for sensitive identity information to a whole new level with the creation of a fake chatbot that slowly guides the victim to their data being stolen.

Cybersecurity researchers from Trustwave SpiderLabs recently uncovered a new phishing campaign that tries to scam people out of personally identifiable information , as well as payment data, by faking a DHL customer support chatbot.

It starts the usual way - the victim will get an email, saying they have a parcel pending with DHL, and that further instructions are needed.

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022 . Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/10.99. Stealing credit card information

If the victim takes the bait, theyll be redirected to a fake DHL customer support website that seems to be running a chatbot. However, this is not a real chatbot, but rather an app with limited options and predefined
responses.

If the victim still doesnt spot the numerous red flags that have been popping up along this journey, theyll soon find themselves giving away sensitive
data, such as their DHL login credentials (email and password ), as well as credit card information (cardholder name, card number, expiration date, CVV code).

Whoever is behind this campaign has really put some effort into it. Before giving away their DHL login information, victims will have to pass a fake captcha page. Once they enter their card data, the payment gateway will first check the validity of the card. Afterwards, the user gets redirected to a one-time password (OTP) page, where theyll have to enter a code received via SMS. Read more

Credit card fraud detection vs credit report monitoring: Whats the

difference?

Cybercriminals are using fake Black Friday deals to steal your credit card

details

Watch out for these Facebook scams, users warned

Ironically, the victim is never asked for a phone number, so the only thing
to do at this point is either realize the whole thing is a sham, or try to enter any random set of numbers.

The researchers did the latter, and after getting a security code invalid message four times, on the fifth attempt, the page redirects to another page saying that the submission was successfully received.

As usual, be extra careful when receiving links and attachments via email, most of them are probably malware or viruses. Keep safe from internet fraudsters with the best security keys around



======================================================================
Link to news story: https://www.techradar.com/news/hackers-are-spinning-up-fake-chatbots-to-trick- you-into-handing-over-your-data/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)