Scammers are resorting to a new tactic by sending deceptive voting messages through chat apps, posing a threat to users’ accounts. Exploiting the popularity of voting contests, these messages lure users into fake websites to steal personal data, as revealed by the security experts at Kaspersky.
The deceptive scheme involves directing users to a seemingly legitimate webpage hosting a voting contest. The page displays images of athletes with a “Vote” button and real-time counters, creating a false sense of authenticity to engage users. If users fall for the scam, they might unknowingly provide their usernames and private 6-digit codes, leading to potential account hijacking.
Tatyana Shcherbakova, Web Content Analyst at Kaspersky, emphasized the attackers’ exploitation of trust in online contests to steal sensitive data. She highlighted the importance of awareness and vigilance to safeguard against such scams.
To protect against account hijacking, Kaspersky advises users to:
1. Enable two-step verification on WhatsApp for added security.
2. Verify the authenticity of websites before entering personal information, especially from unsolicited links.
3. Never share verification codes, as WhatsApp will not request them.
4. Use reputable security software to identify and block malicious websites and links.