內 容
|
各位同仁 大家好
近期校內 mail2 郵件主機 收到大量網路釣魚信件，是關於 國外證券公司的釣魚信件列如 IBKR、uSMART、MooMoo…..
其信件主旨通常帶有 【合規審查】、【資格審查】、【帳戶安全】、【安全警示】、【風險預告】、【稅務預警】、【緊急處理請求】、【安全警報】、【盈透證券】、【時效性通知】、【重要申報】、【稅務更新】…….等等的主旨，其內容為要請看到這封信件的該公司客戶，依其說明點入虛假的網址，輸入帳號及其對應的密碼及一次性密碼(OTP)。
目前大部分的此類釣魚信件會被垃圾郵件系統過濾至攔截郵件明細，但是還是有一些漏網之魚，請同仁多加注意。
其手法為
1. 詐騙人假扮不特定國外證券公司，寄出有超連結的信件，聲稱使用者的資訊有問題需要更新，誘騙使用者登入更新資料。
2. 使用者一旦按下超連結，會進入虛假網站，並引導使用者輸入帳號、密碼及一次性密碼(OTP)。
3. 詐騙人隨即盜用受害者的帳戶買賣股票，令其蒙受損失。
如果持有國外證券帳號的同仁，請注意不要不經查證就相信該封電子郵件的通知，請自行登入官網去操作或是直接聯繫該公司的窗口詢問相關問題，避免蒙受損失
-----------------------------------------------------------------------------
Dear Colleagues,
Recently, the campus mail2 email server has received a large volume of phishing emails impersonating foreign brokerage firms, such as IBKR, uSMART, MooMoo, etc.
The subject lines of these emails usually contain keywords like [Compliance Review], [Qualification Review], [Account Security], [Security Alert], [Risk Notice], [Tax Warning], [Urgent Request], [Interactive Brokers], [Time-Sensitive Notice], [Important Declaration], [Tax Update], and so on. The content asks customers to click on fake links and enter their account credentials, passwords, and One-Time Passwords (OTP).
Currently, most of these phishing emails are filtered into the quarantine log by our spam protection system. However, a few may still slip through, so please stay vigilant.
The scam tactics are as follows:
Scammers impersonate various foreign brokerage firms and send emails with hyperlinks, claiming that the user is account information needs to be updated and tricking them into logging in.
Once users click the link, they are directed to a fake website that prompts them to enter their account ID, password, and One-Time Password (OTP).
Scammers then immediately hijack the victims i accounts to trade stocks, causing them financial losses.
If you hold accounts with foreign brokerage firms, please do not trust email notifications without verifying them first. Please log in directly through the official website to manage your account or contact the company is official customer support directly to avoid financial losses. |
|