The Cybercrime Directorate investigated a case of electronic fraud targeting smart phone devices (Smartphones)
The involvement of at least fifteen people was identified, including three store owners in central Athens
The Cybercrime Division uncovered a large-scale electronic fraud targeting "smartphones" of a specific manufacturer.
The police investigation to date has revealed the involvement of at least fifteen (15) individuals, including three (3) owners of stores selling mobile phone devices and accessories, in the center of Athens.
A case was filed against them for the – as the case may be – offenses of illegal access to an information system, acceptance and distribution of proceeds of crime and computer fraud.
The investigation into the case is based on complaints from citizens, according to which, after their mobile phones were taken away (due to theft, burglary or robbery), they were defrauded through fraudulent short messages (phishing sms), with the alleged sender being the specific mobile phone manufacturing company.
More specifically, the victims, after their device was removed and if they had activated a pre-installed service of the specific company, which notified the new owner of the removed device to contact them by phone, received a fraudulent message informing them that their device had been located.
Then, in order to display the exact location of the device, the above message urged them to enter their login details on a specific website (which resembled the company's official website).
After the above information was entered, it was intercepted, resulting in the device's security measures being bypassed and the perpetrators gaining access to its data, making the device functional and available for sale to new users.
From the many months-long and thorough police and digital investigation of the Cybercrime Directorate, the new "owners" of the removed devices were identified, while the individuals involved in both the process of intercepting the account login details and bypassing the devices' security measures, as well as in their subsequent placement on the market, were identified.
In addition, some of the mobile phones were found to be available for sale through advertisements, either on personal social networking website accounts or on buying and selling websites.
Further analysis of the electronic traces identified three stores selling mobile phones in the center of Athens and, after investigations into them, the involvement of their owners in the purchase and sale of the devices in question and in the process of intercepting the connection details was identified, while twelve (12) additional "smart" devices (mobile phones and tablets) were found and seized.
It was also found that two of the store owners were collaborating with two (2) individuals of Pakistani origin, who reside permanently abroad and undertook, in return for a monetary reward, to unlock the stolen devices, sending the fraudulent messages.
From all the investigations, a total of sixteen (16) mobile phones and one (1) tablet were found and seized, of which eight (8) have so far been returned to their legal owners.
TheCybercrime Prosecution Directorate continues its investigations to fully clarify other related cases, while the participation of those involved in other similar cases of data interception and subsequent sale of "smart" devices derived from criminal activity is being investigated.
|
Graphical illustration of the mode of action
The Cybercrime Prosecution Directorate, in the context of preventive action, on the occasion of this specific case, recommends to internet users and owners of "smart" phones, in order to avoid the spread of the phenomenon:
- To take the security measures provided by the manufacturers of their devices, which are related to preventing unauthorized access to their data ("strong" screen unlock codes and personal accounts, two-step verification, fingerprint recognition, PIN code, etc.)
- In the event of theft or loss of the device, if possible, place the device in lost mode.
- Be particularly cautious if they receive messages (sms or e-mails) requesting or providing information about their lost device, taking into account that phone finder applications do not provide information about the device's location via messages (sms or email) and while the relevant information is provided only after connecting to the official website of these applications.
- Do not enter personal device management account information on websites other than the official websites and applications of the manufacturer companies.
- Immediately inform the relevant mobile phone provider, in order to activate a block on the connection of the lost device in order to avoid any charges from unauthorized use.
- In the event of locating the geographical location of the device through "phone finder" applications, immediately inform the competent local police authorities, taking into account that there may be geographical and temporal discrepancies between the location estimated based on the applications and the actual location of the device.
- In any case, they should be informed by the official websites of the manufacturers of their devices regarding their proposed security measures, as these vary and change depending on the policy of each company and the technical specifications of each device.
It is recalled that citizens can communicate, anonymously or by name, with the Cybercrime Prosecution Directorate in order to provide information or report illegal or reprehensible acts or activities carried out via the Internet, at the following contact details:
- By phone: 111 88
- By sending an email to: ccu@cybercrimeunit.gov.gr
- Through the application for smart phones with iOS & Android operating system: FEELSAFE e-Commerce
- Via Twitter "SOS Cyber Alert Line": @CyberAlertGR
- Also relevant information from the website https://cyberalert.gr/
