Since the beginning of summer 2023, more than a dozen scam sites have emerged on RuNet that offer key production services. Links to such resources are placed in the announcements at the entrances of Russian apartments. This was reported to socialbites.ca by Sergey Trukhachev, deputy director of the Solar AURA external digital threat monitoring center at RTK-Solar (formerly Rostelecom-Solar), which develops tools and ensures information security.
According to the expert, classical psychological tricks are used to encourage people to enter the site and order keys, for example, messages that the intercom at the entrance will be changed soon. At the same time, for the convenience of “customers”, the ads are accompanied by a QR code that leads to a malicious site.
“Ads allow attackers to reach their target audience at minimal cost, because people who thoughtfully play with a bunch of keys while waiting for an elevator are the least likely to expect to be caught when they see messages on behalf of the management company,” Trukhachev explained.
The fake websites discovered by RTK-Solar experts have an extremely minimalist design. These are just a login form in which you need to specify the address and the required number of keys at a price of 300 rubles per piece. Sometimes a phone number column is added to this list. Payment for services is made by transferring money to a bank card. For credibility, fake sites contain details of a real company that is engaged in the maintenance of intercoms.
“Since such sources are not branded and not associated with mass phishing mails, they remain invisible to most security systems and can exist for quite some time, bringing profit to their creators,” Trukhachev said.
According to the expert, being vigilant as always will help not to fall victim to a new scam scheme. When you see an announcement about doing any work or providing services with a link to a website, you shouldn’t click on it, let alone leaving the data there and paying for anything. You need to call the management company and check the relevance of the information in the brochures.https://www.socialbites.ca/tech/2023/07/03/17194082.shtml
Earlier, cyber experts warned Russians against a new type of phone scam with Lyudmila from the call center.