A sophisticated new tactic has emerged among telephone fraudsters: manipulating victims` phone book contacts using VCF (vCard File) attachments. This alarming trend was recently highlighted by a Telegram channel dedicated to exposing and combating fraudulent call centers.
The modus operandi involves victims receiving a message via a messenger application, cleverly disguised as crucial communication from trusted entities such as banks, delivery services, work colleagues, or even acquaintances. The deceptive message contains a VCF file, which the recipient`s phone will often prompt them to save, either as a new contact or by updating an existing one. The criminals` objective is for the user to inadvertently accept the changes, thereby replacing legitimate contact information with fraudulent details controlled by the scammers.
In light of this evolving threat, citizens are strongly urged to exercise extreme caution and never open attachments from unknown or suspicious senders. It is important to understand that while VCF files themselves are not inherently malicious—they are a legitimate and straightforward method for exchanging contact information between known and trusted individuals—they can be weaponized in phishing attempts.
This development follows earlier warnings from experts regarding typical scammer strategies. A member of the State Duma Committee on Information Policy previously noted that telephone fraudsters frequently employ psychological tactics designed to evoke a sense of urgency or panic in potential victims. Such tactics often include demands for confidential personal or financial information, or enticing offers of incredibly lucrative deals and prizes, all aimed at compelling the victim to act impulsively without critical thought.
