As we told you at the beginning of December, the parcel delivery scam is making a comeback in France as the end-of-year holidays approach. While online orders are increasingcybercriminals seek to pose as package delivery companies to trap users.
Also read: A data leak hits Eurostar – scams are likely to multiply
Dozens of new fake sites
Damien Bancal, security researcher from the Zataz blog, has also identified dozens of fake sites impersonate delivery companies, such as Mondial Relay, Chronopost or Colissimo. Most of the malicious URLs spotted by the researcher concern Mondial Relay.
Zataz particularly highlights ma-livraison-mondialrelay[.]fr and monitoring-mondialrelay[.]fr. These fake sites strictly follow the design of the official Mondial Relay site. Sites posing as Chronopost have also emerged, such as chronopost-deliveryerr-repro[.]fr. This tactic helps to calm users' distrust. Generally, sites are shared via SMS or emails.
Also read: Following the Free hack, a “massive” wave of scams targets subscribers
Urgent payment required
The scam consists of claiming an urgent payment to finalize the delivery of a package. The criminals pretend “additional costs”particularly related to customs. Anxious to receive their order before Christmas, the target is tempted to enter their bank details without asking any questions. Cybercriminals then take possession of the data, and can use it to carry out transactions without your knowledge.
Among the most popular delivery scams, we also find that of the package that does not fit in the mailbox. As our colleagues from Le Figaro report, many French people received an SMS, allegedly sent by Mondial Relay, indicating that “your package does not fit in your mailbox”. The SMS asks the target to reschedule delivery to a relay point… for a few euros. To begin the process, you must click on a button “delivery rescheduling”. This is where the trap closes and the hackers steal the bank details.
Mondial Relay's warning
Faced with the resurgence of parcel delivery scams, Mondial Relay reminds that the company “will never ask you to download a file, make a bank transfer, send an SMS to track your package or contact a premium rate telephone number, pay additional fees or send an SMS to track your package ». The firm specifies that all emails “are sent from [email protected] or [email protected]of course never from an @gmail.com address for example ».
Note that these types of scams are on the rise during the month of December, when consumers expect to receive many packages. However, phishing attacks impersonating Mondial Relay have already caused damage in France last May. We therefore recommend constant vigilance throughout the year.
???? To not miss any news from 01net, follow us on Google News and WhatsApp.
Source :
About you
