BACKGROUND
BruCERT has recently received a number of complaints from the public regarding phone scammers impersonating legitimate banks. The scammers contact victims through unofficial channels such as apps like WhatsApp or Viber, usually calling from an international number. They claim to be calling to check all customers’ cards and pressure the victim to reveal personal and financial information.
IMPACT
Background
Fake news articles have been circulating on social media as sponsored ads, encouraging the public to invest in a cryptocurrency trading platform called Bitcoin Storm, which allegedly can transform anyone into a millionaire within 3-4 months.
Impact
Recommendations
Background Description:
Studies show that 80% of Bruneians use WhatsApp for businesses and sharing information via mobile devices. Due to the way that WhatsApp sends an SMS to users who login to their account on a new device, it leaves users open to account hijacking just by ‘shoulder surfing’. Someone who knows a user’s phone number can easily take over their account just by looking at the victim’s phone when it receives the 6-digit code.
Impact:
Background
Scammers are sending fake copyright infringement notices through WhatsApp and email, claiming to be from Instagram. The message claims that the user’s Instagram account will be permanently deleted for violating copyright guidelines, unless the user provides feedback within 24 hours by clicking on a link.
The link leads to a phishing website where the user is asked for their Instagram username and password, followed by their email address and password.
Impact
Background
There is an increasing number of reports from local Instagram users who have been receiving direct messages (DM) from an unfamiliar account claiming to be an “old friend” who would like to share some old photos.