- Статьи
- Internet and technology
- To deceive expectations: scammers began to profit from the return of foreign companies to Russia

To deceive expectations: scammers began to profit from the return of foreign companies to Russia

Scammers began to make a phishing newsletter in which they offer to restore Visa and Mastercard cards, about this was warned by the Department for Organizing the Fight against the Illegal Use of Information and Communication Technologies of the Ministry of Internal Affairs. Meanwhile, according to experts, attackers may start using other schemes related to the return of foreign companies to Russia. Read more about these threats in the Izvestia article.
Why is the return of foreign companies to Russia interesting to fraudsters
This topic is of interest to fraudsters for several reasons at once, Igor Shvetsov, senior information security engineer at R-Vision, says in an interview with Izvestia. Firstly, news about the return causes an emotional response among people, creating expectations of positive changes.
— Secondly, such events are often associated with improved quality of services and economic growth, which reduces the vigilance of potential victims, — says the expert. — Scammers use this positive information background to create the appearance of formality and reliability of their offers.Sergey Yezov, Deputy Head of the Cybersecurity Center at the Neymark IT campus, adds that for many Russians, foreign brands used to symbolize quality, reliability and a high level of service. Rumors that these brands may return make people feel nostalgic and confident that the old, proven standards will become the norm again. This creates a false emotional background of trust, which scammers use to attract attention and deceive.
How fraudsters can exploit the issue of returning companies
The latest statements from foreign companies are an additional information opportunity to reach another part of the audience of potential victims, Alexander Vurasco, Director of Development at the Solar AURA External Digital Threat Monitoring Center (Solar Group), said in an interview with Izvestia.
— Someone will respond to a message about restoring the card, someone to a gift from a fashion brand, someone to a message about tax arrears or the need to replace meters," the expert says. — In all such cases, one or another topic is used by scammers for one simple reason.: people are interested in her.
According to Marina Probets, an Internet analyst and expert at Gazinformservice, in addition to phishing sites that simulate the recovery of Visa and Mastercard cards, fraudsters can use other schemes related to the return of foreign brands, such as fake registration sites to receive compensation for blocking cards, the promise of supposedly profitable offers for the exchange of blocked ones. cards for new ones, as well as mailing lists with promises of priority access to the brand's services after its return in exchange for personal data.
Other possible threats include the creation of fake accounts on social networks and messengers on behalf of brand representatives to collect personal information under the pretext of "verification" or "registration", as well as the spread of malware under the guise of updates to access the brand's services. At the heart of all these schemes is a game of Russians' desire to regain access to familiar services and get material benefits, Marina Probets notes.
— Attackers can use design elements and logos of international companies that left Russia," adds Olga Svistunova, senior content analyst at Kaspersky Lab. — It is also likely that phishers expect potential victims to want to restore access to outdated services, their accounts in them, and so on.
In addition, it is possible that fake job advertisements in international companies may appear, upon response to which gullible users will be asked to send scans of documents, notes Konstantin Gorbunov, an expert on network threats and a web developer at the Security Code company.
What are the dangers of fraud schemes on the return of companies to Russia
Just as fraudulent schemes about pensions and sanatorium treatment are aimed primarily at pensioners and the elderly, options with the return of foreign brands are aimed at those who actively used these brands before they left, says an expert analyst at Banks in an interview with Izvestia." by Erania Bochkina.
— It can be assumed that these are mostly young and middle—aged people living in large settlements, having an average and higher income, but at the same time not having a sufficient level of financial literacy and awareness, - says the expert.
The interest in popular brands is mainly the prerogative of young people and middle—aged people, Konstantin Gorbunov agrees. According to the expert, scammers will try to deceive those users who do not follow official announcements, and also do not adhere to the rules of cyber hygiene: install software from unfamiliar sources, follow links from emails without checking the sender before that, and so on.
The danger of such fraudulent schemes lies in the theft of users' personal data, including bank card numbers, passwords, passport data and other confidential information, says Marina Probets. After gaining access to this information, fraudsters can make unauthorized financial transactions, emptying victims' accounts. In addition, the stolen data can be used to obtain loans, issue forged documents and other criminal activities.
— As a result, victims of such schemes not only lose money, but also face lengthy legal and bureaucratic problems related to restoring their data and preventing further damage, the specialist emphasizes.
How to protect yourself from fraud schemes on the return of companies
The basis for successful protection is a critical look and following the rules of cyber hygiene, says Konstantin Gorbunov. All incoming information — loud announcements, news and rumors — must be validated in trusted media.
— In addition, it is important to remember that you cannot install software received in a messenger or downloaded from an official website, — says the interlocutor of Izvestia. — It is also necessary to compare the URL of the visited page with the "real" website address, as well as the sender of the letter with official contacts, and for online purchases to use a separate payment card with a minimum amount to minimize the risks in case of a successful fraud attack.
Erania Bochkina adds that it is necessary to stop any telephone conversations if there is a suspicion that there are scammers on the other end of the line. In particular, when making such calls, they often mention gifts and special offers, favorable conditions, or offer specific but very necessary services (as in the case of the imaginary reactivation of Visa and Mastercard cards).
Increasing cyber literacy among employees and users, regular training in the basics of information security, the use of modern antivirus solutions and regular software updates help reduce the risk of attacks. The use of two-factor authentication and timely contacting cybersecurity specialists in case of questionable situations will allow us to quickly identify and neutralize threats, concludes Igor Shvetsov.
Переведено сервисом «Яндекс Переводчик»