Flow
Flow
Flow
TriniTuner.com  |  Latest Event:  

Forums

WhatsApp Spam, Hacks, Phishing Scams - Beware

this is how we do it.......

Moderator: 3ne2nr Mods

User avatar
maj. tom
TriniTuner 24-7
Posts: 11305
Joined: March 16th, 2012, 10:47 am
Location: ᑐᑌᑎᕮ

Re: Spam and Scams

Postby maj. tom » May 28th, 2024, 5:38 am

Scamming is a game of numbers, and unfortunately the circumstances were just right for this victim to be fooled and get taken. The TTPost scam.

https://www.guardian.co.tt/news/victim-of-50000-online-scam-wonders-how-fraudsters-got-info-6.2.2012348.96c603b18a

Jane Park (not her real name) said she went to a passport appointment at the Immigration Division in San Fernando two weeks ago and filled out various forms, providing her name, address, date of birth and passport number. She also provided information for TT Post to deliver the passport to her home. An immigration officer told her it would take four to six weeks to get the document but it could arrive earlier.

Last week, Park said received an SMS that appeared to be from TT Post regarding the passport delivery, which said she had a package it could not deliver due to an incorrect address. The message asked her to update her address within 24 hours, or TT Post would return the item and redeliver at her expense. It provided a link for her to modify her address.

Park said she clicked the link, which took her to a website she believed to be the legitimate TT Post website, as it had all the information she submitted to the Immigration Division.

“It said a driver attempted to deliver the passport, but either no one was available or the directions were incorrect. They said we had 24 hours to update the delivery information, and if we did not, it may incur a small fee. Initially, I was trying to update the information because I was preparing to travel and got caught up with work. I forgot to put in the information. I checked it, and I knew 24 hours had passed. It said I had to pay $2.04, so I said it was not bad. The information seemed legit, and when I tried to enter my card information, it took me to the Scotiabank website to put my information,” Park said.

After she entered her information, the website asked her for a code for the credit card. She retrieved a code generated by the website from her email, believing it was added security. When she entered it on the site, it returned a message stating, “Incorrect.” After attempting the process four times, she became suspicious and checked her bank account to see if TT Post had charged her. She saw four purchases made in Dubai, the United States and India. Park realised she had fallen prey to a scammer and immediately contacted her bank, which had already halted her credit card after flagging it for suspicious activity.

“Only a handful of people knew I took my son to get his passport two weeks ago: my husband, his (son’s) father, Immigration and TT Post. Nobody else knew that, so for me to be targeted and hacked, it has to be that it happened through immigration or TT Post because those are the only two organisations that knew I was waiting on a passport,” she said.

As she was about to travel abroad, Thomas has yet to contact TT Post, the Immigration Division or the Fraud Squad and is still awaiting the passport.

Contacted yesterday, TT Post managing director George Alexis told Guardian Media he was in a meeting and asked us to call back at 3.30 pm. However, he did not answer further calls. Efforts to contact the Immigration Division were not successful.

Park noted that all transactions were in TT dollars, which the bank also found interesting, leading her to believe the scammer was local. However, she was more worried that a cybercriminal had her personal information.

“I am very scared about that. It is madness, to be honest, and just shows you how easily your entire family can be at risk for completing a simple, legal transaction.”

Guardian Media reported earlier this month that approximately 50 customers fell prey to text messages with false information claiming to have been sent by TT Post demanding that the recipients pay money to collect their packages.  Checks show that scammers devised several messages they sent to people’s phones, advising them of package deliveries. However, the common thread was a link to confirm their addresses.

TT Post and the Police Service (TTPS) have issued numerous warnings regarding this scam. The TTPS Cyber and Social Media Unit issued a public advisory weeks ago, saying it was aware of and was investigating the scam. It advised people to verify all communications claiming to be from official organisations by contacting them directly. It also warned people against clicking on suspicious links or downloading attachments.

redmanjp
TriniTuner 24-7
Posts: 17685
Joined: September 22nd, 2009, 11:01 pm
Contact:

Re: Spam WhatsApp messages from +234 numbers

Postby redmanjp » May 28th, 2024, 6:07 pm

but is it that the ttpost message was specific about the passport? i got 2 msgs myself but they just mentioned the 'package' nothing specific. it's when it gets specific about something you are actually expecting then u can be fooled.

User avatar
Duane 3NE 2NR
Admin
Posts: 28772
Joined: March 24th, 2003, 10:27 am
Location: T&T
Contact:

Re: Spam and Scams

Postby Duane 3NE 2NR » May 28th, 2024, 7:01 pm

^ no I think she just said it was about her passport because that's what she was expecting to receive.

maj. tom wrote:Scamming is a game of numbers, and unfortunately the circumstances were just right for this victim to be fooled and get taken. The TTPost scam.

Yup it's a game of numbers - try with thousands of ppl and you bound to get through to a few.

Even if the SMS had "passport" on it, the scammers know Immigration use TTPOST to send out passports so they do a generic "TTPOST and passport" SMS.

She saw four purchases made in Dubai, the United States and India... Park noted that all transactions were in TT dollars, which the bank also found interesting, leading her to believe the scammer was local.

If the transactions were from Dubai, US and India then it would not be in TTD. Her scotia card would be a TT card since scotia doesn't have a "US side" like RBL etc. They just give you a certain amount of USD purchases you can make but the transaction shows it as the TTD equivalent. So I don't know how the bank could find that strange.

“Only a handful of people knew I took my son to get his passport two weeks ago: my husband, his (son’s) father, Immigration and TT Post. Nobody else knew that, so for me to be targeted and hacked, it has to be that it happened through immigration or TT Post because those are the only two organisations that knew I was waiting on a passport,” she said.

It's not any of those organisations. The scammers just send out SMS to tens of thousands of numbers and hope to catch someone who may actually be expecting a package from TTPOST and they get ketch and fill out the form with their credit card info.

I got this one via SMS, but a quick look at the URL shows that it's not UPS.com but instead some feepayments.com and so I realise it's bogus. The URL is usually the first and easiest way to tell if the link is legit.
70571163-20f8-4345-ab3b-a7e3f6c6e659.jpg
70571163-20f8-4345-ab3b-a7e3f6c6e659.jpg (19.52 KiB) Viewed 1328 times

User avatar
Duane 3NE 2NR
Admin
Posts: 28772
Joined: March 24th, 2003, 10:27 am
Location: T&T
Contact:

Re: Spam WhatsApp messages from +234 numbers

Postby Duane 3NE 2NR » June 3rd, 2024, 10:22 pm

Seems there's another WhatsApp phishing scam going on.
People are being asked for codes that allows the caller to take control of your whatsapp account.
If anyone calls or messages do not share your whatsapp code.

User avatar
gastly369
TriniTuner 24-7
Posts: 10467
Joined: May 15th, 2009, 4:40 pm
Location: trinidad

Re: Spam WhatsApp messages from +234 numbers

Postby gastly369 » June 3rd, 2024, 10:30 pm

Ah yes... Cant wait to have some fun with them dumbarsses...

pugboy
TunerGod
Posts: 29397
Joined: September 6th, 2003, 6:18 pm

Re: Spam WhatsApp messages from +234 numbers

Postby pugboy » June 3rd, 2024, 10:39 pm

whatsapp provides such a facility ?
why would it have that ?

I heard there are also scammers who are making actual voice calls as well to get ppl to go to some link.

Duane 3NE 2NR wrote:Seems there's another WhatsApp phishing scam going on.
People are being asked for codes that allows the caller to take control of your whatsapp account.
If anyone calls or messages do not share your whatsapp code.

User avatar
Duane 3NE 2NR
Admin
Posts: 28772
Joined: March 24th, 2003, 10:27 am
Location: T&T
Contact:

Re: Spam WhatsApp messages from +234 numbers

Postby Duane 3NE 2NR » June 3rd, 2024, 10:47 pm

pugboy wrote:whatsapp provides such a facility ?
why would it have that ?

0034c9c6-d8ef-432b-9e2d-75553731c59e.jpg
0034c9c6-d8ef-432b-9e2d-75553731c59e.jpg (36.15 KiB) Viewed 1228 times


pugboy wrote:I heard there are also scammers who are making actual voice calls as well to get ppl to go to some link.

Yes they can pretend to be calling from bmobile or digicel and tell you to call out the code that will show up on your phone

pugboy
TunerGod
Posts: 29397
Joined: September 6th, 2003, 6:18 pm

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby pugboy » June 4th, 2024, 5:37 am

so that code is like a bank email verification code.

the recent case I know of, a guy's phone was hacked and he is on a trini cycling whatsapp group
members of that group started receiving actual voice calls from a 234 number asking to join a whatsapp group for upcoming race events, very convincing stuff.
person spoke in a very neutral accent voice too.
one member recorded the call.

Chimera
TunerGod
Posts: 20057
Joined: October 11th, 2009, 4:06 pm

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby Chimera » June 4th, 2024, 6:22 am

Yea I've had quite a few customers come in who lose access to their whatsapp accounts.
The hackers take over their accounts and message people on their contact list saying they stranded in remote parts of trinidad and to send them money with western union or they want to borrow 2000 for a week and to send them it with western union

The funniest one is where they message a man wife who was in the same house as the man to ask her to borrow money.

The hackers does run out the code tries as well so you can't get back access to the account for 24 to 48 hours

User avatar
maj. tom
TriniTuner 24-7
Posts: 11305
Joined: March 16th, 2012, 10:47 am
Location: ᑐᑌᑎᕮ

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby maj. tom » June 4th, 2024, 6:49 am

Whatsapp has a number of extra security features that most people ignore. They just sign up and leave it. If they dump the SIM number without deleting the Whatsapp account, Whatsapp will keep the account active for 45 to 60 days after. That means if your number is recycled by the provider within that timeframe, the next person to register on Whatsapp with it will be added to existing group chats you are a member of if you don't turn on extra security features*


-Whatsapp has automatic phone number verification that uses the encryption created with the first SMS OTP to verify your physical device IMEI every time you open Whatsapp. That's how you can change the SIM in another country and your Whatsapp account from home will still be working. It can also use the phone carrier's info to verify the same device ID. Whenever a devices changes, the end-to-end encryption changes and you will see that notification within a chat, so it's a red flag if you suddenly start receiving weird messages from such a contact that recently changed the encryption.
<<<<So If Whatsapp or someone is suddenly asking you for an SMS OTP code, something is wrong since it's detecting a new device>>>>

-*2FA with a 6 digit PIN. This is not the same as the SMS verification code when you created your Whatsapp account with your phone number.

-*2FA your Whatsapp account to your email. If you forgot the 2FA PIN above this is how it will be reset. If not, verify by SMS. If not, wait 7 days to access your account again after another SMS OTP verification. Even so, I have been automatically added to existing group chats after that wait period with a recycled number. I was able to see the contact info of everyone in that group. It's a security flaw that I don't know if it has been fixed yet or if everyone experiences this.

-*End-to-end 64-bit encryption chat backup so no one can restore your chats except you after verification. You have to turn it on.

-It issues a passkey that links to your physical device in your hand to your account to open the app, like fingerprint or screen lock. Just like a banking app. You have to turn it on in App Lock.

-It will give notification if there are any other linked devices using your account via Whatsapp Web. Or you can check for yourself under Linked Devices.

User avatar
Duane 3NE 2NR
Admin
Posts: 28772
Joined: March 24th, 2003, 10:27 am
Location: T&T
Contact:

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby Duane 3NE 2NR » June 4th, 2024, 10:41 am

Seems to be happening to a lot of people.

84dbafb4-3758-4293-9fa7-169165f8033a.jpg

Chimera
TunerGod
Posts: 20057
Joined: October 11th, 2009, 4:06 pm

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby Chimera » June 4th, 2024, 10:44 am

Elderly people will get very easily tricked

User avatar
Duane 3NE 2NR
Admin
Posts: 28772
Joined: March 24th, 2003, 10:27 am
Location: T&T
Contact:

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby Duane 3NE 2NR » June 4th, 2024, 10:47 am

Chimera wrote:Elderly people will get very easily tricked

Especially since the request is coming from someone in your contacts that you supposedly know

pugboy
TunerGod
Posts: 29397
Joined: September 6th, 2003, 6:18 pm

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby pugboy » June 4th, 2024, 11:15 am

correct
no amount of end to end encryption helping them when they getting bamboozled by a human voice

ultimately these folks looking to hack their online banking apps

Duane 3NE 2NR wrote:
Chimera wrote:Elderly people will get very easily tricked

Especially since the request is coming from someone in your contacts that you supposedly know

Chimera
TunerGod
Posts: 20057
Joined: October 11th, 2009, 4:06 pm

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby Chimera » June 4th, 2024, 11:21 am

They asking u to send the money to western union and to bank accounts tho so the police can easily deal with this

User avatar
MaxPower
TriniTuner 24-7
Posts: 16071
Joined: October 31st, 2010, 2:37 pm

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby MaxPower » June 4th, 2024, 11:24 am

Chimera wrote:Elderly people will get very easily tricked


Yep big time and they are the prime targets.

User avatar
maj. tom
TriniTuner 24-7
Posts: 11305
Joined: March 16th, 2012, 10:47 am
Location: ᑐᑌᑎᕮ

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby maj. tom » June 7th, 2024, 11:38 am

I want to reiterate how good Google Messages is at automatically detecting and filtering spam without any bother to you.
This was in the "Spam & Blocked" setting.

Also on this list is a number of messages automatically filtered from:
Courts
Courts RF
Digicel
bmobile
CRA spam
TT Post scam
Courts OPT

So use Google Messages as your default sms/rcs app.

Image

redmanjp
TriniTuner 24-7
Posts: 17685
Joined: September 22nd, 2009, 11:01 pm
Contact:

Re: WhatsApp Spam, Hacks, Phishing Scams - Beware

Postby redmanjp » June 7th, 2024, 12:24 pm

pugboy wrote:correct
no amount of end to end encryption helping them when they getting bamboozled by a human voice

ultimately these folks looking to hack their online banking apps

Duane 3NE 2NR wrote:
Chimera wrote:Elderly people will get very easily tricked

Especially since the request is coming from someone in your contacts that you supposedly know


they already using AI voices which sound like their relatives? :shock:

Advertisement

Return to “Ole talk and more Ole talk”

Who is online

Users browsing this forum: death365, foss, Google Adsense [Bot], matr1x and 70 guests