Bogus Singapore Police Site Serves as a Watering Hole

phishing_siteThe Singapore Police Force (SPF) released an advisory warning about a phishing site that’s spoofing the Force’s website, Channel News Asia reports. The bogus website informs the user that their computer has been locked “due to viewing and dissemination of materials forbidden by law of Singapore,” for the most part pornographic content of an extreme nature.

The site tells users that they need to pay a fine of S$1,500 (about US$1,000) with either VISA or MasterCard within six hours, or else they’ll be subject to criminal prosecution.

The site uses a tactic we’ve covered recently, in which the browser goes into full-screen mode to trick the user into thinking their screen has frozen. The site uses an image that mimics a Windows 10 desktop background with the browser and website in the center of the screen. As a result, the user may think their screen has frozen, while they’re actually looking at a full-screen image.

“Such websites are actually phishing sites in disguise, designed to extract personal information and banking details from unsuspecting victims, which could result in monetary losses as scammers would use these details to make unauthorised purchases and transactions,” the police said.

The police added that they’ve received five reports of people falling for this scam since January 2020, with victims losing at least S$22,700 (approximately US$16,291).

The advisory says users can press Alt+Tab to try to return to the desktop. If this doesn’t work, they can hit Ctrl+Alt+Delete to bring up the task manager and stop the web browser processes.

Even if users don’t remember these shortcuts offhand, the most important defense is knowing that it’s a scam so they can ask for help. The scammers in this case used some well-known social engineering techniques, such as frightening language and the imposition of a deadline. New-school security awareness training can educate your employees about common scare tactics used by scammers.

Channel News Asia has the story:

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before the bad guys do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

Subscribe To Our Blog

Ransomware Has Gone Nuclear Webinar

Get the latest about social engineering

Subscribe to CyberheistNews