RCIPS warns of Phishing Scam on local webpages

RCIPS warns of Phishing Scam on local webpages

The RCIPS Cyber Crime team are aware of a number of local companies whose webpages have been compromised by malware, which may affect anyone interacting with those webpages.

The web page, when loaded, will display a captcha which asks you to verify 'I am not a robot'. On completing the captcha the following pop up appears:

[cid:image001.png@01DC4438.DD4BC520]


This is part of the malware and must not be completed. The Windows Key + R command opens the Windows command prompt, which can be used to execute various commands on your system. The malware on the web page contains a fake 'copy and paste' command which Ctrl+V will copy into your computer command prompt and infect your computer with malware.

Captcha can be a legitimate program, however where it asks you to use Windows Key +R then it is fake and should not be followed by the user.