A phishing attack is targeting Internet Banking users in Japan, leading authorities to issue urgent warnings to businesses across the country.
This new scheme combines social engineering with sophisticated digital techniques to compromise corporate accounts and facilitate unauthorized fund transfers.
Read more: INTERPOL: Eight people arrested for phishing & romance scams
The scammers begin the scam by posing as bank representatives over the phone, claiming that the victim’s online banking credentials have expired, creating a false alarm. Using this pretext, they solicit personal data from unsuspecting corporate users. Victims then receive well-crafted phishing emails with malicious links that lead to fake websites that mimic legitimate banks.
HackManac researchers observed that once victims enter these websites, they are prompted to enter their login credentials, thereby handing over sensitive information to the scammers. Armed with this data, the scammers gain unauthorized access to corporate accounts and proceed to transfer funds to unrelated accounts, making the transactions difficult to trace and reverse.
See also: New phishing scam masquerades as a security alert
This complex money‑laundering method adds a layer of complexity to the fraud, making recovery efforts more difficult. The emergence of this fraud comes amid increased cybercrime in Japan. In the first half of 2023 alone, 2,322 online banking frauds were recorded, with losses of about 3 billion yen (approximately $21 million).
This new scam could significantly increase these figures if no measures are taken. Experts urge corporate users to be especially careful, to verify any unsolicited communication from banks through official channels, and to avoid clicking on suspicious links or providing sensitive information without proper verification.
Read more: Online banking: Attacks due to coronavirus - How to protect yourself?
As the threat evolves, Japanese authorities, with the National Security Agency, are considering adopting artificial intelligence (AI) to more effectively detect and counter phishing websites. This proactive approach aims to strengthen security against the growing trend of fraud affecting both individual and corporate banking customers. Corporate online banking users in Japan are advised to remain vigilant and report any suspicious activity to their financial institutions and relevant authorities immediately.
Source: cybersecuritynews
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
