Scam “on InPost”. Be careful with such messages

Beware of fraudsters impersonating InPost. Cybercriminals send messages informing about problems with the delivery of the package due to incomplete address data, therefore asking for an update. Clicking on the link provided by the fraudsters redirects you to a fake InPost website, where the recipient of the message is asked to provide personal and payment details.

– Due to incomplete address details, we regret to inform you that we are unable to deliver your parcel. The parcel was returned twice. Please update your address immediately – reads the content of the fake message, followed by the mentioned link.

InPost fraud. A warning has been issued

A warning against fraudsters was issued by the Polish Financial Supervision Authority on the X CSIRT platform. – Attention! We warn against a phishing campaign impersonating the InPost courier company. Cybercriminals send fake messages informing users to update their parcel delivery address. In fact, dangerous websites steal users’ personal data and payment card information. Be careful and don’t get robbed! – appeals the CSIRT of the Polish Financial Supervision Authority.

Let us recall that the so-called phishing is one of the most popular types of attacks based on e-mail or SMS messages. It uses social engineering, a technique in which online criminals try to deceive the victim and make him take actions in line with their intentions. Cybercriminals impersonate courier companies, but also administration offices, telecommunications operators, or even our friends, trying to extort our login details, e.g. to bank accounts, social media accounts we use, or business systems.

The name phishing evokes sound associations with fishing. Criminals, like anglers, use appropriately prepared “bait”. For this purpose, they usually use forged e-mails and text messages. More and more often, fraudsters also operate via instant messaging and social networking sites.