Maybank has issued an alert to caution its customers about malware scams that involve cybercriminals using fake websites and malware-ridden apps to steal a victim’s personal and banking details. In particular, the bank highlighted an advisory by the Malaysia Computer Emergency Response Team (MyCERT), which focussed on a recent malware scam campaign known as SMSSpy.

“MyCERT has issued a security advisory on the latest fraud campaign, Malaysian banks’ customers’ credentials are stolen when an Android malware is downloaded on to their mobile phones. Once installed, this malicious app is able to view any SMS sent to the mobile phone, which includes obtaining TAC numbers to perform internet banking transactions,” Maybank warned in its Facebook post.

Meanwhile, the MyCERT advisory noted that cybercriminals involved in the SMSSpy campaign will use a number of ways to persuade individuals to download these malicious Android apps. One method is to impersonate the Law Enforcement Agency (LEA) and regulators, informing you that you have run afoul of the law, and as such, must pay a sum of money to unfreeze your financial account. You will then be instructed to download the app to make your payment – after which it’ll be able to steal your credentials.

Another modus operandi involves these scammers using fake websites that pose as legitimate services, particularly popular pet and cleaning services. As a potential victim, you’ll also be directed to download a malware-ridden app to pay for the services. MyCert further noted that eight websites have been identified as malware scams that impersonate services found only in Malaysian, including Grabmaid, Maria’s Cleaning, Maid4u, YourMaid, Maideasy, MaidACall, MyMaidKL, and PetsMore – here’s our earlier coverage of an individual’s close call with such scammers.

Ultimately, Malaysians are urged to always be wary of installing any apps or Android Package (APK) files from unknown sources, or click on any suspicious links sent through SMSes, WhatsApp, and other messaging services. If you’re a Maybank customer who suspect that you’ve been scammed, make sure to call the bank’s Fraud Hotline at 03-5891 4744 to lodge a report.

(Sources: Maybank, MyCERT)

• TAGS:
• Grabmaid
• Maid4u
• MaidACall
• Maideasy
• Malware Scams
• Maria’s Cleaning
• Maybank
• MyCERT
• MyMaidKL
• PetsMore
• Scams
• SMSSpy
• YourMaid