New Phishing Scheme Uses Fake Traffic Police Notices to Steal Russian Data

World news » New Phishing Scheme Uses Fake Traffic Police Notices to Steal Russian Data
Preview New Phishing Scheme Uses Fake Traffic Police Notices to Steal Russian Data

The Ministry of Internal Affairs (MVD) has issued a stern warning regarding a sophisticated new scam where fraudsters are dispatching fabricated emails and messages, masquerading as official communications from the State Traffic Safety Inspectorate (GIBDD), with the aim of compromising the personal information of Russian citizens.

Digital illustration of cyber security threat, a lock with a malicious shadow.

This elaborate deception, as extensively detailed by the MVD on its «Russian Cyberpolice Herald» Telegram channel, hinges on deceiving recipients into believing they have committed a traffic violation. According to Anton Nemkin, a prominent member of the State Duma Committee on Information Policy, these fraudulent communications typically include a PDF attachment meticulously designed to mimic an official traffic ticket. To bolster their credibility and create a stronger sense of authenticity, these deceptive documents may even incorporate accurate personal details of the target, such as their real name or vehicle registration number.

The scam messages are cleverly engineered to feature a prominent «pay now» button that redirects users to an external website. Clicking this button can lead unsuspecting individuals to a deceptive portal specifically crafted to phish for sensitive banking card details, all under the false pretense of settling a fine. In other alarming scenarios, victims might be redirected to a malicious site that automatically initiates the download of harmful software onto their device. This malware is highly capable of intercepting passwords, logging keystrokes, and gaining unauthorized access to critical banking applications, posing a significant threat to financial security.

The MVD unequivocally emphasizes that all genuine notifications concerning traffic fines are exclusively delivered through official, verified channels, most notably via the «Gosuslugi» state services portal. Citizens should be highly suspicious of any other communication method for such alerts.

In the broader context of cybersecurity advisories, Irina Volk, an official representative of the MVD, previously introduced and highlighted the critical concept of the «golden hour.» This refers to the immediate hour following a scam incident, which is deemed crucial for victims to act swiftly to minimize potential adverse consequences. Furthermore, recent intelligence has revealed that fraudsters are increasingly exploiting features within platforms like Telegram, specifically its gift-sending functionality, to clandestinely disseminate prohibited advertisements. These illicit promotions often include links leading to unregulated online casinos or even extremist websites, broadening the scope of their malicious activities.