Cybercriminals never stop looking for new ways to extract confidential data. This time the CSIRT KNF team (the Polish Financial Supervision Authority's cyber security team) is warning about a fake app that impersonates OLX Payments and Google Services, and also uses InPost logos to make its activity look credible.
How does the new scam work?
The fraudsters use a multi-stage scheme designed to extract online banking login details:
- Installation of a fake app - Cybercriminals impersonate OLX Payments and urge users to download an app from outside the official stores (Google Play or the App Store).
- Impersonation of Google Services - After launching the app, the user is directed to install another fake app, supposedly linked to Google Services.
- Use of the InPost logo - The next step is to display a form using the InPost logo, which suggests that funds can be collected.
The aim of the scam
The cybercriminals' main aim is to obtain the victim's online banking login details. Once they have them, the fraudsters can take control of the bank account and steal money.
How to protect yourself from scams
The CSIRT KNF team urges everyone to be especially careful and reminds users of a few basic security rules:
- Download apps only from official sources - Use Google Play or the App Store and avoid installing apps from outside trusted stores.
- Avoid clicking suspicious links - Cybercriminals often use text messages, emails or messaging apps to send links leading to fake apps.
- Verify the authenticity of messages - Always check that a message comes from a trusted source.
- Use antivirus software - Update your software regularly and use apps that protect your devices against threats.
How to recognise a fake app
- A request to install the app from outside the official stores.
- Well-known logos (e.g. OLX, InPost) used in a suspicious way.
- A demand for confidential data, such as your online banking username and password.
Summary
New scams, such as impersonating OLX Payments and Google Services, show that cybercriminals are becoming ever more creative. Staying vigilant and following basic security rules can protect us from losing our data and our money.
Have a question about this?
The first consultation is free - let us talk about your situation.
