Sber prevented a phishing attack on its employees

The cybersecurity service of Sberbank prevented a massive phishing attack on the bank: scammers sent letters to employees of the credit organization with an invitation to the military registration and enlistment office to “clarify personal data”. About it informed press service of the credit institution.

“The bank’s systems prevented employees from getting emails, where they were urgently invited to the military registration and enlistment office to “clarify personal data.” The mailing contained a malicious file (virus) – a “mobilization order”. When opening the file, there could be a risk of infection of the entire IT infrastructure,” the bank said in a statement.

In this regard, Sberbank noted that scammers have again begun to use the information agenda that is relevant to society.

“In this case, the phishing mailing “from military registration and enlistment offices” is a fake, in which scammers exploit the theme of the signing by the President of the Russian Federation of Decree No. emphasized in the bank.

Sber did not rule out that other organizations or individuals would be subjected to such a phishing attack. The bank urged to be vigilant and “not to succumb to provocations.”

May 12 Ministry of Defense of Russia urged ignore e-mails with “subpoenas”. It was reported that over the past week the National Center for Defense Control (NTsUO) of the Russian Federation received 426 calls. 13 855 appeals have been recorded since the beginning of the system operation. According to the Ministry of Defense, some of the calls were initiated by the Ukrainian side in order to spread false and provocative information.

Last autumn in the press service of Kaspersky Lab reportedthat malefactors in Russia began to send by e-mail under the guise of subpoenas from military registration and enlistment offices malicious programs. According to the company’s specialists, the malware and technology used have many similarities with the tools of the XDSpy cybergroup. The goals of XDSpy are spying, stealing documents and other files, as well as data for accessing corporate mailboxes.