Smartphone users warned not to fall prey to scammers
Fraudsters inventing new techniques
Police are warning people not to click on any links or download any unauthorised apps as they could potentially lose all of their savings to hackers.
Deputy national police chief Torsak Sukwimol briefed the media yesterday in response to a hacking report involving a victim who lost money from his bank account after he charged his phone at a public spot.
A report from Pol Lt Gen Worawat Watnakornbancha, commissioner of the Cyber Crime Investigation Bureau (CCIB), indicated the victim’s smartphone appeared to have been installed with a scam matchmaking app called “Sweet Meet”.
He said the installation of the app was the main reason the phone was hacked and the money drained from the man’s banking app. This was apparently unrelated to another hack related to shared charging stations reported recently by media outlets.
“The most important thing is people should avoid downloading apps from external sources suggested by some live-streaming programmes. Smartphone users must download and install apps directly from the Google Play Store or the App Store,” he said.
Pol Gen Torsak said the charging hacks are a phishing scam that can only obtain basic information or GPS data.
Meanwhile, the Bank of Thailand (BoT) has consulted the Thai Bankers Association about whether fake charging cables may have been used as a hacking tool, saying the attacks were more likely to have been caused by unauthorised apps filled with malware. Once such an app is installed, the user will lose control of their phone, or their actions may be monitored so their transaction data can be pilfered.
The BoT has increased countermeasures, such as more security updates to its mobile banking app, in response to threats from call centre gangs and those sending out fake SMS texts. Financial institutes have warned smartphone users to avoid clicking on malicious links embedded in SMS texts or sent via Line messages.
The Bank of Thailand has warned banks and consumers to keep up their guard against an elevated risk of financial cybercrime.
The central bank and the Thai Bankers’ Association (TBA) released a joint statement yesterday in response to a report on the possibility of a mobile phone user losing his information and money in his bank account through a public charging cable.
According to the statement, following a joint investigation by the central bank and the TBA, the fraud was not caused by a charging cable. Money was transferred from the phone’s owner because malware had infected the device, with the owner “tricked” into installing it.
The malware enabled a hacker to remotely monitor and control the phone to transfer money from the user’s bank account. The operation happened when the phone was not in use by the owner.
The central bank said fraudsters have developed many kinds of tricks, such as deceptive text messages, call centres, fake loan applications and, most recently, manoeuvres to lure consumers to install malware-embedded applications in their phones.
The regulator said it continues to introduce measures to prevent and deal with these types of fraud.
The central bank also collaborated with the Digital Economy and Society Ministry, the Office of the National Broadcasting and Telecommunications Commission, the Anti-Money Laundering Office, the Royal Thai Police and other agencies to implement measures to prevent fraud.
These prevention efforts include updates of banks’ security systems for mobile banking, obstructing fraudulent websites and setting up an online channel for financial fraud notifications.
The related parties are continuing to promote financial and technological literacy among consumers.
The Bank of Thailand has urged financial institutions to consistently upgrade their tools to counteract cybercrime, as well as improve collaborative mechanisms with related parties to prevent such crimes.
The regulator is also pushing consumers to remain vigilant about such criminal activities.
The central bank has warned mobile phone users against opening any suspicious links, installing any suspicious apps and using unsafe phones to make financial transactions.
Consumers should regularly update their mobile banking apps to the latest version.