In a massive phising scam targeting SBI customers a link is being send labelled “update your KYC”. If you click on the link, you will end up losing all your money. It is being reported that a group of hackers from China are behind this malicious link.
Cybercriminals are asking customers to update their KYC. But the problem is with the link that is attached to the message. Delhi-based think tank CyberPeace Foundation and Autobot Infosec have unearthed the cyber crime being carried out to dupe SBI customers.
How it happens
When the customers clicked on the link that came along with the update your KYC message, they were redirected to a page that asks them to submit confidential information such as username and password along with a captcha code.
“Following this, it asks for an OTP sent to the user’s mobile number. As soon as the OTP is entered, it redirects the user to another page that asks the users to enter some confidential information again like account holder name, mobile number, date of birth. After entering the data, it redirects the user to an OTP page,” the cyber experts told IANS.
Hackers are also claiming to offer gifts worth Rs 50 lakhs to SBI customers. The only point of commonality in the two messages that are being circulated is the link to the malicious website that can strip a user of his savings. It is important to note that SBI is not offering any such deals. You can check the official website of SBI or the official social media handles of the bank to find out if they are offering any such deals and cash prizes. In most cases, you will either receive such messages on WhatsApp or as an SMS.