The Croatian Banking Association (HUB) warned on Friday that there is an active campaign of identity theft via SMS, or false representation in the name of Croatian Post, aimed at stealing personal and financial data from bank clients for financial gain.
Attempts at fraud most often occur through SMS messages and fake websites, all accompanied by malicious, sophisticated, and credible use of the visual identity of Croatian Post, HUB notes.
The mentioned fake messages most often contain a false notification about the inability to deliver a package due to incomplete information, and such messages also offer a link that leads to malicious fraudulent services that often appear convincing, where potential victims are asked to enter sensitive data.
The goal of the criminals is to obtain secret data from bank clients such as usernames and passwords, token numbers and their one-time passwords for logging into the bank’s digital services, or to obtain secret card data – CVC/CVV numbers, in order to gain unauthorized access to the banking applications of potential victims and acquire unlawful financial benefits, HUB warns.
