New scams promise O Boticrio giveaways from WhatsApp | Social networks

Criminals use O Boticrio cosmetic brand in four strokes on WhatsApp. More than 320,000 people have been affected in the last 15 days, according to PSafe's digital security lab, dfndr lab. The fake promos carry malicious links with the promise of freebies, makeup, perfumes, makeup and 100% discounts on beauty products. Messenger users for Android and iPhone (iOS) should be wary of messages with exaggerated benefits to avoid falling for fraud.

Despite the different forms of advertising to spread the scam, all are based on the same strategy: the victim must access the link, inform private data and share the form with friends. That is the supposed method to get the awards. In addition, people should also download virus-infected applications that enable the phone to be vulnerable to intrusion and information theft. By obtaining the content, criminals can perform theft, blackmail and other crimes.

WhatsApp will ban those who use WhatsApp GB and Plus; know back to the officer

Scams use O Boticrio brand to promise Women's Day giveaways on WhatsApp Photo: Divulgao / PSafeScams use O Boticrio brand to promise Women's Day giveaways on WhatsApp Photo: Divulgao / PSafe

Scams use O Boticrio brand to promise Women's Day giveaways on WhatsApp Photo: Divulgao / PSafe

Want to buy a cell phone, TV and other discounted products? Meet the Compare dnetc

One of the images used by the bandits refers to "Woman's Mistress" to deceive the victims. The reference to the International Women's Day, on March 8, brings even more credibility because it seems like a one-off campaign, so 30,000 giveaways were released to users. According to Emilio Simoni, director of dfndr lab, scammers fake green promotional actions from big brands on commemorative dates to apply the thefts. "These strategies end up potentiating the coup and, consequently, increases the number of affected people," concludes Simoni.

The links displayed in the fake advertisements contain suspicious URLs, which do not refer to the official website address of O Boticrio. Banners also feature brands of digital security services such as Ebit and Buy & Trust to bring the feeling of security to the victims. This combination of factors has led to criminal system effectiveness and vulnerability for thousands of people.

Simoni's recommendation to prevent these attacks is to check email addresses through digital protection services. Remember that promotions are often advertised on official platforms of the brand, such as website and Facebook or Instagram pages, for example.

False promos of O Boticrio on WhatsApp contained fake links to steal data Foto: Divulgao / PSafeFalse promos of O Boticrio on WhatsApp contained fake links to steal data Foto: Divulgao / PSafe

False promos of O Boticrio on WhatsApp contained fake links to steal data Foto: Divulgao / PSafe

Other scams involved the brand

Cosmetics company O Boticrio has already been used by bandits to attract victims on social networks. In November 2018, a fake Christmas promotion promised to distribute branded make-up products, and more than 40,000 people were cheated. In the same year, some 140,000 people were deceived in an alleged campaign offering free samples of NativaSPA items.

At the time, the company came to pronounce: "O Boticrio takes the opportunity to suggest to all its consumers to always verify the legitimacy and origin of what they receive before making any access. In case of doubt, the consumer can contact the brand through Boticrio's proprietary channels. "

To avoid falling into scams like this, it is recommended not to access unknown email addresses, as well as beware of very advantageous promises, with free gifts or prices far below commercial value. Another tip is to distrust ads with grammatical errors that require your personal information or sharing with other contacts. WhatsApp offers a native tool for reporting the sender for disclosing false information.

Another method capable of increasing messenger security is two-step verification. That way, an account can only be accessed on another device after entering a previously configured six-digit password. Such a measure makes criminal breach difficult because without the secret sequence, malicious people cannot use the account in the application, even with the cloned chip.

WhatsApp: What function is still missing in the app? Comment on dnetc's Forum.

WhatsApp: Mailing List Questions and Answers

WhatsApp: Mailing List Questions and Answers