Kaspersky experts have spotted a new e-fraud system designed to trick people into believing they owe them compensation. Under the guise of offering compensation for personal data leaks, scammers are urging users to buy "US Temporary Social Security numbers" worth about $ 9 each. Victims were found in Russia, Algeria, Egypt and the UAE, among other countries.
Privacy and data protection are among the most talked about topics in recent years. This is not surprising, as are the penalties imposed on companies that have experienced data breaches. This, like any other topic that catches the eye, could not help but attract scammers who look forward to making money at the expense of others.
Kaspersky experts have identified a brand new design that takes advantage of these privacy issues. The plan includes a website allegedly owned by the Privacy Fund, which was set up by the US Commerce Commission. As mentioned, the fund issues compensation to those who may have leaked personal data and is available to citizens from any country in the world.
For those who are interested, the site offers to check if there has ever been a leak of data of each user. For this purpose, the user must provide his full details (name, phone number and social media accounts). Once this is done, a notification appears stating that the user has been leaked, which may include data such as photos, videos and contact information, allowing the user to receive thousands of dollars in damages. However, scammers do not just ask the user to enter a credit card number and wait for the amount of compensation to be credited. Users must also enter their social security number (SSN - a nine-digit number issued to US citizens, as well as permanent and temporary employees in the US).
In each possible scenario – whether it's the absence of the SSN or entering a correct existing SSN – the site alerts about errors and offers to sell a temporary one for $9. Upon agreement, the victim is redirected to this payment form in Russian or English with the purchase price set in rubles or dollars respectively. The specific form depends on the victim's IP address.
“The scammers themselves are likely Russian-speaking, as suggested by the request for payments in rubles, plus the system's suspicious similarity to other easy money offers that often lure residents of Russia and the CIS. The e-bait in these schemes varies — gifts, surveys, even a part-time job as a taxi dispatcher — but they tend to be in Russian (as are some of the previous links). The bottom line is always the same: the big promise of plenty of easy money, followed by a demand to pay for a cheap service, be it a Commission, a "secured" payment, or a temporary SSN. The new system is quite up-to-date and related to the provision of compensation for data leaks. As soon as some organizations started paying users, fraudsters decided that there is a monetary opportunity for them too," comments Tatyana Sidorina, expert better safetys in Kaspersky.
To stay protected from the potential risks of cyber fraud, Kaspersky experts advise:
Do not trust payment offers. If someone promises you a big cash payout for something seemingly trivial like participating in a survey, it is almost certainly a trick. And if you are asked to pay something to get the money, you can be doubly sure that it is a scam.
Use reliable sources. Look up the organization to see if it actually exists, and if it does, check its website carefully. Pay attention to the language: a reputable organization will not publish text filled errorand typographical errors.
Use a reliable security solution.
Here you can find detailed information about the fraud.
