Scammers have started posing as courier service employees to Russians and extorting codes from SMS messages to log into "Gosuslugi". This was reported by Senator Artem Sheikin.
According to him, the victim receives a call and is asked to clarify the delivery details, including their first name, last name, and phone number. Then they are asked to dictate the code from the SMS message sent.
Real couriers only request the code at the time of the actual delivery of the package, not in advance by phone.
Since the SMS message arrives at the time of the conversation, the person does not suspect anything and says the numbers. Next, the scammer moves on to the second part of their plan. The victim receives another SMS message warning them of unauthorized access to "Gosuslugi".
To solve the problem, the attacker offers to call "support" at the specified number. Then the conversation goes to a "cybersecurity specialist". He convinces the person that their electronic digital signature has fallen into the hands of a criminal group.
To increase trust, he sends an email with information about himself: name, position, photo, sometimes even an ID number.
However, this is just a performance, Sheikin emphasized. The senator reminded that no one needs to give codes from SMS messages, and information about a supposedly hacked account should be checked.