A new scam in WhatsApp that promises to release the 13th Bolsa Famlia salary was detected on Thursday (4) by dfndr lab, PSafe's laboratory specializing in digital security. The fake chain aims to steal personal data and install malicious applications on mobile phones of social program beneficiaries. The scam has already hit at least 180,000 people who received, accessed, or shared the malicious link within seven days. According to PSafe, the scam page that requests personal data as full name and address records at least a thousand new hits every hour.
READ: WhatsApp crashed? Unravel serious app failure myths
New WhatsApp scam promises to release 13 salary for Bolsa Famlia beneficiaries Photo: Thssius Veloso / dnetc
Want to buy a cell phone, TV and other discounted products? Meet the Compare dnetc
The message accompanying the fraudulent page announces that the government requires the personal data of Bolsa Famlia beneficiaries to receive the salary.
Government opens this month the registration for those who will receive the thirteenth salary of the Bolsa Familia program, check if you are entitled.
The text is followed by a link that redirects the user to a page with a brief search. In it, the victim must provide personal data such as full name, city, state and number of residents. In addition, the fraudulent portal indicates that you share the URL with your WhatsApp contacts, which would be necessary to obtain the supposed benefit.
The site also induces the user to give permission to receive future notifications, which naturally aim to spread more scams. In the end, the victim is still redirected to fraudulent pages to download malware-infected apps.
Screenshot of WhatsApp Chain Fraudulent Website Photo: Divulgao / PSafe
The use of Bolsa Famlia to spread scam in the novelty. In April last year, a similar current that promised money to program participants affected 600,000 people in just 24 hours.
"The advantage of requesting permission to send new scams is that the hacker has a direct channel of communication with the victim. The message of the cybercriminal appears directly on the notification screen of the phone, just a tap for the victim to open the attack," explains the director of dfndr lab, Emilio Simoni.
To prevent WhatsApp scams, it is essential to be aware of messages. Promises of benefits, spelling and grammatical errors, request to click on external links, and sharing requirements for more contacts are always indicators of fraud.
The "Forward" label itself, introduced by the app last year, can serve as a warning for this kind of trap. The dfndr lab expert also advises you to check whether the link is true or not, and to have an antivirus that detects phishing in messaging applications and social networks.
WhatsApp: How to recover deleted messages? Find out on the dnetc Forum.
How to hide names, profile photos and messages in WhatsApp Web