A new scheme has appeared in the Telegram messenger to steal user accounts, targeting a specific person, and not mass mail, unlike the old ones. In this respect report “Izvestia” in relation to the information security company “Jet Infosystems”.
To implement the plan, attackers first examine user profiles on social networks. They learn various details from their personal and professional lives, such as where they studied or worked, their hobbies, social circles, habits. Then, under the guise of a friend or former colleague, they add a person to a group on Telegram, where they seek help with online voting.
The group was created specifically for cheating and is full of fake members. Pretending to be familiar, the scammer uses his photograph, imitating his communication style. It persuades the user to click on the “vote” button, after which a phishing authorization page opens, where you need to enter a phone number and a confirmation code to enter Telegram “to combat cheating”. This data is then passed on to scammers who gain full access to the victim’s account.
Once an account is compromised, scammers can use it for various purposes: sending spam or phishing links, obtaining personal data or extorting money. They can also reset all active sessions, preventing the owner from recovering the account.
Cybersecurity experts say the new system is more effective than its predecessors. It allows scammers to create a personalized approach and increase the likelihood of cheating. The layout is especially dangerous for channel owners who have a large number of subscribers and can become a tool for distributing malicious content.
To protect their accounts, users should be careful when following unknown links and should not share their data with third parties. It is also recommended that you limit access to your social media profiles and do not post personal information on your pages that could be used by scammers.
Former Russians said About three scam plans on dating services.