Russian citizens are being alerted to a sophisticated new scam utilizing the «Gosuslugi» public services portal, where fraudsters are exploiting accounts to illegally claim tax refunds and steal sensitive personal data.
Reports indicate that cybercriminals are gaining unauthorized access to taxpayers` accounts on the Gosuslugi platform. Their primary objective is to manipulate the system by submitting fraudulent tax refund applications and directing the payouts to their own bank accounts, rather than the legitimate users`.
Beyond the direct financial theft, these malicious actors also harvest critical personal information. This includes, but is not limited to, passport details, SNILS (the Russian individual insurance account number), credit history, and data pertaining to individuals` real estate holdings. Such a treasure trove of sensitive data can subsequently be used for further extortion attempts or other illicit activities.
A particularly deceptive tactic employed by these scammers is their avoidance of initiating direct contact with potential victims. Instead, they skillfully engineer scenarios designed to make the victim believe their Gosuslugi account has been compromised. This manipulation is intended to prompt the unsuspecting individual to proactively reach out to the fraudsters, inadvertently stepping deeper into the elaborate trap.
