Alert on malware phishing scams
Alert on malware phishing scam
Recently the Singapore Police Force saw an increase in malware phishing cases.
The modus operandi are:
Victims would come across Facebook advertisements for products or services such as the purchase of durian, otah, home cleaning services, dating services, etc., or receive WhatsApp messages from unknown contacts promoting cheap deals such as travel packages, etc. These are usually cheap and would entice the victims to get in touch with the scammer.
The victims would then be instructed to download an app via third party sites or APK files, for the product order, booking of the services, or accessing the details of the travel packages. These apps are not from the official Apple App Store or Google Play Store, and they contain malware.
Once the victim downloads and installs the app, they would be prompted to grant permission to these apps.
The malware, depending on its functionalities, is able to phish for the victim’s credentials, and/or secretly collect the victim’s data and delete SMSes or bank notifications, and/or take control of the victim’s phone.
Thereafter, the victims would find unauthorized transactions from their bank accounts or credit cards.
The modus operandi has evolved to incorporate bank official impersonation scams. In this variant, after the victim installs the first stage app (as described above), the victim will receive a call from the scammer impersonating a bank official. The ‘bank official’ gives out advice like a legitimate bank officer would;
- Inform the victim that unauthorized transactions were observed from the victim’s account;
- Able to tell the bank account number to the victim;
- Able to state the date, time, and amount of the unauthorized transactions.
The ‘bank official’ is able to articulate the information accurately. This leads the victim to believe the caller is legitimately from the banks and victims would tend to comply with whatever instructions the caller gives.
Next, the ‘bank official’ will advise the victims to download a (fake) ScamShield app by sending the APK file to the victim’s WhatsApp or via third party links. After the app is downloaded, victims will have unauthorized transactions from their bank accounts, and in some cases, victims are not aware of these transactions as the app may delete the bank notification SMSes.
Please remember that HL Bank officers will never advise clients to download the ScamShield app or any other apps via a URL link or APK file. Clients should only download the ScamShield app from the official Apple App Store or Google Play Store.
If you need to report suspicious or fraudulent transactions, our hotline is available 24/7. Do contact us immediately at +65 6349 8330 if you require assistance.
You can find out more about scams and identifying fraud fromhttps://hlbankconnect.com.sg/rib/content/Security_Information.pdf.
Visit ScamAlert.sg to learn more about scams and how to avoid falling prey to them.
HL Bank Contact Centre
For enquiries call us at
+65 6349 8330