The research and investigation team of ESET, a leading company in the field of proactive threat detection, analyzed that the number of phishing campaigns aimed at creating fake websites by Americanas, which is currently in serious trouble and on the verge of bankruptcy, was 40% higher than last year. as in other online stores.
You may also like:
Minecraft: all about one of the most famous games in the world
ALL commands for Minecraft and how to run them
Learn how to download and install Minecraft on your PC, MAC and mobile.
REQUIRED mods for all Minecraft players
The best and rarest Minecraft skins (create you too)
The best textures for your Minecraft
Minecraft in the Books: Stories from Beyond Games
Minecraft PE: All About Minecraft Pocket Edition
The best shaders for your Minecraft
Do you want to play Minecraft with your friends? Find out how here!
Signs of a Fake Americanas Page
This scam has details that make it possible to determine that it is malicious content, such as the URL of the website, which is the most significant difference in cases like this, login buttons and “all departments” that do not correspond to the real website. . However, the fake site is similar to the real one in many ways.
Faced with a crime, ESET analyzed the URL of the website to prove the illegitimacy of the page. As expected, the domain was recently created. Unlike other cases already analyzed by ESET, the fake website contained details and buttons with functions that could easily confuse the victim. When choosing a smartphone to make a purchase, the site offers various model and color options, which has never been seen in another malicious campaign.
Another detail that makes it difficult to determine that the address is fake has to do with delivery options. If the victim wants to get the item faster and decides to get it within 5 days, the site charges a fee of Rs 19.00 which is added to the purchase ticket. In less structured scams, shipping options are always free.
At the time of the proposed purchase and collection of banking data, no unusual details were revealed, that is, the collection is carried out as official sites do. At the stage where the victim is prompted to enter a home address, the cybercriminals have included a smart zip code verification script that allows most of their data to be entered automatically.
In the payments section, if there is a choice credit card, the site makes it impossible to insert serial numbers and other numeric structures that do not have the characteristics of a real credit card number. All other fields are accepted without any validation, however, when the Close Order button is clicked, a card rejection message is displayed informing the victim that they must use a different card or payment method to complete the process.
“Beware of situations where you are asked to provide card details more than once. In most cases, this practice occurs with the intent to extract as much data from your card as possible, as the process never ends,” explains Daniel Barbosa, Information Security Specialist at ESET Brazil.
If the victim has chosen to pay via PIX, a dynamic QR code will be generated for the cost of the items in the cart. While opening their bank application to simulate a payment, the user encountered the CNPJ of a company called “Via Varejo Eletrônicos LTDA”. In context, the name Via Varejo alludes to the real company that the perpetrators sought to give even more credibility to the coup, but Americanas belongs to the B2W group.
To help you avoid falling for these scammers, ESET shares some security tips:
- Looking at the URL: in most attacks of this type, the URL of the website is the first to report that it is a scam, because the attackers cannot use the same address as the official store. Always keep this in mind and always keep an eye on the address of the sites you visit.
- Broken links: criminals often “clone” only some parts of the official site, usually only sections related to certain products and the shopping area. If you’re browsing a website and find links that don’t work or don’t do anything, be suspicious.
- Too big discounts: discounts are a constant in scams of this type. In the case of this malicious campaign, products were discounted by more than 30%. When shopping, always try to consider the average price of an item. If you find something very inappropriate, it could be a scam.
- Shortened payment methods: Established stores tend to provide their customers with various payment methods to facilitate the purchase, if the alleged store only offers PIX as a payment method or, as in the case of the scam on the fake Americanas website, also offers the second option. (credit card. credit) there is a high probability that the store is fake and you are facing fraud.
- Be careful with anything received passively: any information obtained without being asked may be fraudulent. Whether it’s supposedly an unmissable airfare, super promotions in online stores, information about a debt that needs to be paid off as soon as possible, or any other question. Serious companies suggest that their customers look for official means to access any benefits or for any other needs.
- Have a reliable antivirus: The security software, which has levels of analysis focused on Internet traffic, stops the fake website before it loads any instructions in the device’s browser. That’s why it’s so important to have reliable security software updated and configured to prevent threats on all devices.
To learn more about information security, visit the portal We live in safety and read about the American coup case. On the other hand, ESET invites you to discover Secure connection, your podcast about what’s happening in the world of cybersecurity. hear it access.
About ESET
Since 1987, ESET® has been developing security solutions that help more than 100 million users use technology safely. Its portfolio of solutions offers businesses and consumers around the world the perfect balance of performance and proactive protection. The company has a global sales network spanning 180 countries and has offices in Bratislava, San Diego, Singapore, Buenos Aires, Mexico City and Sao Paulo. For more information visit Our website or follow us on LinkedIn, facebook This twitter.
Talk to us in the comments and let us know if you liked this news and take the opportunity to read more news such as our list of the best value smartphones you can buy right now on our website.
Source : Married Games
