Poczta Polska warns against extorting money
In order to obtain specific information, cyber criminals send to random SMS news numbers in which they impersonate the Polish Post Office. Please be advised that Poczta Polska does not send SMSs about making an additional payment to receive a parcel. Please seem to read the received messages and the links contained in it.
The attack is about sending messages containing in the content information about the suspended parcel. In order for the delivery to be made, the customer is asked to make a payment of a different amount (e.g. PLN 1.40) via a false link in the message. The given link is directed to a substituted page similar to the real -time -payment page. Then, after choosing a bank, the customer is directed to the bank's website, which is also false. The customer is convinced that he logs in to his bank's website, but this page is also substituted (the link in the address is different from the bank's address). The customer defines the person to whom the amount is to be transferred - approves the transfer with the code he has received by SMS (the code is visible to the thief, because the page is falsified and each operation performed on the page is monitored in real time). In the SMS received, the amount that the customer was to pay is not equivalent to the amount in the received SMS (PLN 1.40), can be up to several hundred times higher.
People who have just placed the order and are waiting for the parcel are the most susceptible to this attack. The credibility among recipients increases because, sent by SMS criminals, it is signed with the name "Poczta Polska", and in the phone the false message will be displayed under real SMSes received from Poczta Polska.
If you receive suspicious messages or if you suspect irregularities or incompatibilities, please report the case to the police and immediately inform us to the address of cyber security [AT] Poczta-polska.pl . This will allow us to warn other network users.
At the same time, we would like to inform you that Poczta Polska is not responsible for the effects of actions taken by customers in messages disseminated by other entities, including entities impersonating Polish Post Office.