New scams on WhatsApp use cosmetic brands Mary Kay and Who Said, Berenice? to steal user data and install viruses on the phone. So far, about 24,000 people have been harmed by the false promotion of the foreign company that promised a product as a freebie. In the case of the Brazilian industry, part of the Boticrio Group, 4,000 users were deceived with the "Kiss Lipstick" campaign, in which free samples of a release for the lips are offered. The data is from security app developer PSafe. The consultancy also claims to be the same authors of recent scams that involved Coca-Cola and O Boticrio in late 2018.
In both cases with beauty products, the trap uses social engineering, same tactic applied in the last blows. Interested parties should register on a fictitious platform, directed from a malicious link, and pass the ad to contacts in the messenger. However, in assessing older situations, the strategy has become more sophisticated: at the end of the process a personalized address is generated for the person to share. "This makes the scam pass a certain amount of truth to both the accessor and the recipient," explained the consultancy's digital security experts.
Six Things You Shouldn't Do on WhatsApp
Scam involves Mary Kay brand and asks for personal information and message sharing Photo: Divulgao / Psafe
Want to buy a cell phone, TV and other discounted products? Meet the Compare dnetc
Cybercriminals require the link to be shared with five friends to unlock the freebie and thus reach as many victims as possible. For users to redeem the fake gift, they must enter their social security number and social security number on the website. The deceptive digital system is capable of verifying data compatibility, which offers a sense of optimum credibility.
The fraudulent scheme involving Mary Kay also communicated about the contact of a supposed consultant, who would act in the same city as the registered user, to arrange a meeting point where the gift would be withdrawn. Scammers also claim that, on occasion, the person would be introduced to products with exclusive discounts. However, the official website of the cosmetic brand does not contain any promotional action of its kind.
On Who's Said Online Page, Berenice? You can find the brand new product titled "Kiss Lipstick" featured. However, by clicking on the image, the user is directed to a shopping section, in which the lipstick is sold for R $ 39,90. No indicative about free sample distribution displayed. On the contrary, there is information about financial transactions such as installment payments, brand store and freight calculation.
Trap authors with the cosmetic brand Mary Kay also apply the scam with products from Who Said, Berenice? Photo: Play / PSafe
The year 2019 began with a high incidence of scams on WhatsApp, from Faber-Castell school supplies offerings to job openings at Cacau Show, Havan and Samu. Cybercriminals often use attractive themes as bait to leverage attacks. Therefore, it is recommended to distrust messages that contain information "too good" to be true the idea applies to prizes with facilities and exaggerated offers.
Infectious link is the means of virus contraction in the Mary Kay Scam Photo: Divulgao / Psafe
Another way to recognize malicious messages from spelling. Content that has grammatical or spelling errors or that requires the forwarding of personal information, such as credit card or bank account number and password, birthday, social security number, etc. The messenger also tells users not to click on unfamiliar links.
For suspicious situations, the platform offers a native reporting system if the message comes from a friend, delete it and report that it is a scam. The operation is done anonymously and helps the application system, which encounters obstacles in detecting harmful issues by adopting an end-to-end encryption system that values user privacy. A method of enforcing security from 2-step verification is able to restrict access only to access more effectively.
Do contacts appear alone in WhatsApp? Learn how to solve in the dnetc forum.
WhatsApp offline? Trick delivers you from boring people; know how to use