VTB has warned of a new fraud scheme in which attackers pose as school psychologists. Their goal is to gain access to parents' personal data and bank details.
Criminals call parents, introducing themselves as employees of educational institutions, and under the pretext of "mandatory testing" or "drawing up a characterization" for certification, ask them to provide confidential information. Various tricks are used: requesting passport data, SNILS, or even installing a "test application," which is actually malware. The information obtained is then used to access bank accounts or apply for loans.
How scammers work:
- Imitation of trust – the caller introduces himself as a psychologist, refers to the school and "official requirements."
- Psychological pressure – they claim that the data is needed "urgently", otherwise it will affect the child's academic performance.
- Phishing and malware – they may offer to download a "test program" that steals logins and passwords.
In the future, this information can be used to gain access to personal accounts of government portals or banking applications. For example, in social engineering scenarios, attackers can call on behalf of the bank and ask to confirm the operation or apply for a loan in the name of the parents.
Cybersecurity experts recommend not giving personal information over the phone, even if the caller introduces himself as a school employee. It is important to always double-check the information by calling the educational institution at the official numbers. Experts also warn against installing unknown applications at the request of third parties, as this may lead to leakage of confidential data.
Read more on the topic:
Fake Gazprombank application found in the AppStore
They promise money: scammers have come up with a new scheme to find mobile application testers