The link sent announces a raffle in honor of the 30th anniversary of the founding of Amazon - and ostensibly allows you to win a new smartphone • Security expert: "The phone number will be registered in databases that may be used by its holders for spam purposes and other waves of phishing attempts"
The phishing wave continues:
If you received a WhatsApp message asking you to click on a link to receive a gift from Amazon in honor of its 30th anniversary - do not click on the link, as this is a fake message behind it is probably an attempt to get personal information about you and register you for other phishing messages.
The link sent as part of the fraud attempt shows the name of Amazon and the company logo, but as you can see, this is a link that has nothing to do with the American Retail Corporation.
Also, to motivate users to take action without fear, the caption is attached: "No spam ... just promotion ...".
How does the method work this time?
In the first stage, you are congratulated for being selected to participate in a survey that allowed you to win a Huawei Mate 40 device, when the time for responding to the survey is limited and you should hurry - according to a survey conducted by the information security company ESET.
In order to strengthen the credibility of the action, at the bottom of the page is an alleged comments panel from Facebook with users who are upset that they did not win the award and users who are happy, loving and also received the award today.
And just like in previous scams, after answering the questions, you will receive a message congratulating you on your activity, and then you will have three attempts to find the gift from about 9 gift packages presented to it.
In case you were wondering, there is no such thing as not choosing the right box - and after several attempts the prize is revealed.
Assaf Almog, Director of the Service and Support Department at the information security company ESET Israel, states that: "If the participant presses the red button and dials the number automatically, his phone number will probably be recorded in databases that could be used by their holders for spam and other waves of phishing attempts. Do not click on the button, on the next screen they will ask him to enter his phone number in order to contact him.
Lotem Finkelstein, director of the cyber intelligence department at Check Point, explained in an interview with Israel Today that "this is a phishing campaign that of course has nothing to do with Amazon, which continues for several months because the victim is required to distribute the message to five WhatsApp contacts or groups. "Naturally, the shelf life of such a campaign is many months."
"In order to win the prize, the victim is required to answer a short survey that includes general details such as age, gender and type of mobile device in his possession. After he must try his luck in choosing a prize. When he always succeeds. ".
Finkelstein added.
"To stop these attacks, it is important to remember that Amazon and companies like it do not hand out prizes just like that, and certainly do not use social media to spread the word about such lotteries," Finkelstein concluded.
"Also, when we are required for such chain messages, to a very high degree it is Pike News or false messages. And more importantly, do not give personal details to the person who contacted us, whether in a phone call or text message to win something."
