Beware of fake email messages impersonating Windows security services

In newly shared information, the National Cyber Security Monitoring Center - NCSC under the Department of Information Security ( Ministry of Information and Communications ) said that Fox News - a major multimedia channel in the US has just issued a warning about a new online fraud method through fake email messages impersonating Windows security services.

The purpose of the scammers is to steal data and take control of the victim's computer through remote control software.

Malicious actors create fake email messages, using logos and interfaces that resemble regular Windows alerts.

When the victim accesses the message, a 'pop-up' message appears warning the user that access to their device has been temporarily interrupted for security reasons.

The fake notification also comes with a repeating voice message and a warning siren to create urgency and danger, urging the victim to quickly contact the phone number to promptly handle and fix the problem.

online scam warning 0401.jpg
Although a new method of phishing via fake email messages of Windows security services has appeared abroad, the Information Security Department still recommends that domestic users need to be more vigilant. Illustration photo: NCSC

The scammer also pretended to be a Windows technician, instructing the victim to download remote device control software - UltraViewer to check the computer.

Once granted access, the subject scans and steals important data available on the victim's device.

The Information Security Department recommends that people be vigilant when receiving email messages with urgent notification content; carefully verify information via phone numbers or official Windows portals; do not contact using the methods provided in the notification.

People are also advised to use reputable security software and turn on their computer's firewall system to promptly detect and warn of potential threats.

When encountering suspicious signs, people need to quickly report to competent authorities to promptly investigate and prevent fraudulent behavior.

Fraudulent impersonation of postal companies

According to the reflection of KSBY TV Station (USA), recently, people living in California have continuously received messages that are said to come from the US Postal Service - USPS, informing that the shipping process has been interrupted because the recipient's package has invalid information. However, this is a scam by bad guys to steal information from victims.

Specifically, the scammer sends the victim fake messages, notifying that a package cannot be delivered because the postal code on the package is invalid, and asking the victim to provide additional information about the package to facilitate the shipping process.

online scam warning 05 1.jpg
Domestic users are advised to be vigilant to avoid falling victim to fraudulent groups impersonating postal and delivery service businesses. Illustration photo: NCSC

The scammer also included a link to a fake USPS website, asking for access to provide information and stating that if the issue was not resolved within 24 hours, the package would be returned.

After accessing the link, the victim is redirected to a fake website. On this website, the victim is asked to provide personal information such as home address, full name, phone number, bank card information...

Experts from the National Cyber Security Monitoring Center recommend that people be vigilant when receiving messages with the above content.

People also need to carefully verify information; do not provide personal information through links containing strange characters or suspicious interfaces.

In case of detecting suspicious signs, people need to quickly report to the police for support, timely prevention of fraud and investigation to track down the subject.

Delivery businesses identify postman calls to protect users . Delivery businesses such as Vietnam Post and Viettel Post apply the method of contacting customers via delivery apps by identifying postman calls, which is a measure to help limit the situation of people being scammed by fake shippers.