According to Kaspersky experts, 30 fraudulent domains related to Pix keys were registered in just 24 hours after the official start of the registration process for the new electronic payment system. Among the identified addresses, we have chavepix.me; pxpix manager; paypix.com; pixapp.online; pixbrasil.tech; pixempresas.com; supportpix.online and pix.atualizacaowebsegura.gq.
Registering fake domains is the first step for criminals start a phishing campaign or host malicious pages with forms to steal victims’ personal and bank details. In comparison, Kaspersky recalls that after the Federal Government announced Emergency Aid in April, 100 fraudulent domains were detected in just one week.
Fraud begins with registering a domain. That fraudsters and domain-squatters are already doing. The next step is to send millions of malicious emails, which distribute malware, phishing, or simply want to collect your data, all using the theme of #PIX pic.twitter.com/lX3xWWCFBS
– Fabio Assolini (@assolini) October 6, 2020
“The Brazilian banking system has one of the most advanced anti-fraud systems in the world and this is a reflection of the quality of national cybercrime. From experience in this market, I believe that the electronic payment system will be secure, we just don’t have the details to say how this security will work, ”says Fabio Assolini, senior threat researcher at Kaspersky in Brazil.
The recommendation remains the same: just register your Pix keys through official bank applications the institution in which you are an account holder.
Source: Kaspersky
See the original post at: https://thehack.com.br/criminosos-ja-registraram-30-dominios-fraudulentos-sobre-chaves-pix/?rand=48873
