Hackers are using a new fake chatbot trick to steal your data — here’s how to keep yourself safe
Hackershave found a new way to access people’s personal information.
- They trick people into sharing their personal information through fake DHL delivery service chatbots.
- Let's take a look at how fake chatbots are used to trick people.
AdvertisementCompanies and websites use chatbots to provide customer support and build trust with the customers by assisting them. Researchers from Trustwave SpiderLabs have found that hackers use fake DHL chatbots to trick people. This new approach makes people fall into their trap and give their personal information.
The process to steal information is a multi step process. Hackers use an easy way to make people believe in them by mailing ‘failed DHL delivery’. In this fake chatbot method, one starts a conversation and then directs the person to the actual page by which they break into the information.
How do people fall into the trap?
This fraud process starts when the person clicks on the mail and gets directed to a fake DHL customer support page. The fake chatbot page is designed to build trust and keep people hooked. On this page, the user will get an option to choose between - fix delivery or the link given - both will redirect to the same website.
After choosing the option, a chat box will appear where the person is asked to confirm the tracking number. The fake chatbot will also ask for the delivery address and send you the image of the parcel to build confidence. The person is asked to click on the 'schedule delivery' option. However, to convince people that the page is not fake, a CAPTCHA box will be shown. The person will have to fill in the login credentials and payment information.
At last, if the person clicks on the pay now button, he/she will be asked to enter OTP sent on the mobile number. The page will show security code is no longer valid several times but on the fifth try, the person will be redirected to another page saying that the submission was successfully received.
What are the red flags?
- The email received does not have a full email address component.
- The application already has predefined responses based on the limited options given.
- While clicking the 'Schedule delivery' option there is nothing else that is clickable except the confirm and close button.
- If you check the CAPTCHA page source, it is nothing more than an embedded JPEG image file.
Google's Imagen can use text to make images, paintings, CGI renders using AI — here are some pictures
Google’s new research on digital wellbeing needs your data to dig deeper into user behavior and reduce the risks of smartphone addiction
Popular on BI
- Five planets will stage a rare spectacular event in the night sky on March 28
- Sam Altman, who was already wealthy before starting OpenAI, reportedly doesn't own any equity in the company behind ChatGPT
- A 'hole' 30 times Earth's size has spread across the sun, blasting solar winds that'll hit our planet by end of this week
- Crompton Greaves Consumer Electricals and kitchen appliance maker Butterfly announce merger
- ICMR comes up with first ethical guidelines for application of AI in biomedical research, healthcare
- Measures taken by IIFCL to keep bad loans under check: Parliamentary panel
- Microsoft adds 'AI-generated stories' to its Bing search
- Housing sales up 14% annually in Jan-Mar to 1.13 lakh units across top 7 cities: Anarock