Beware these bogus WhatsApp subscription messages that want to steal your banking info

CERT-LatestNews Malware Security News ThreatsCybercrime Uncategorized

whatsapp-thumb.jpg

Cybercriminals hope WhatsApp users have forgotten they don’t need to pay for the service.

Image: iStock

Cybercriminals prey on naivety, and a new scam campaign attempting to trick people into providing bank details in order to pay for a fake WhatsApp subscription does just that.

WhatsApp did once charge a subscription fee of $0.99/£0.99, but stopped charging it in January 2016.

However, the fraudsters behind this scam are looking to take advantage of the fact WhatsApp — which has over a billion users — did once rely on a subscription service in an effort to dupe victims into handing over their banking information.

The UK’s fraud and cybercrime centre Action Fraud and the City of London police have issued a warning about the nefarious campaign. Emails purporting to be from ‘The WhatsApp Team’ claim that “your subscription will be ending soon” and that in order to continue to use the service, you need to update your payment information.

Victims are encouraged to sign into a ‘customer portal’ with their number and to enter payment information.

whatsapp-scam.jpg

whatsapp-scam.jpg

WhatsApp scam email.

Image: Action Fraud.

Naturally, this is a scam — with spelling errors in the text a huge giveaway — and all the victims are doing is providing criminals with their financial details. Criminals could use these to simply make purchases or as a basis for further fraud. Scammers have also been known to use text messages in an effort to dupe victims into paying for a fake subscription.

Those who receive this email are urged not to click on any of the links, but to instead report it to the police. Action Fraud also offers advice to those who have already fallen for the scam, telling victims to “run antivirus software to ensure your device has not been infected with malware”.

Scammers often attempt to lure victims into handing over their credit card information — or installing malware onto their machines — often with authentic-looking phishing emails claiming to be from real companies.

Previously, Action Fraud has warned about scammers attempting to steal credentials from university staff with fake emails about a pay rise, while police have also issued a warning on cybercriminals attempting to infect people with banking malware by using emails pretending to be from a charity.

READ MORE ON CYBERCRIME

http://www.zdnet.com/article/beware-these-bogus-whatsapp-subscription-messages-that-want-to-steal-your-banking-info/#ftag=RSSbaffb68

Tagged