Criminals impersonate InPost again – it's very easy to be fooled

inpost scam


In September, due to concern for consumer safety, InPost resigned from sending information about the status of the shipment via SMS. From mid-September parcels can be tracked only via the mobile app and the Internet. This is not an obstacle for cybercriminals acquiring InPost customers via SMS, which the owner of popular Paczkomaty warns about.

Fraudsters send their victims messages with an alleged link to track the shipment in the application. The link leads to an infected inpost24 [.] Tk domain, where the visit ends with downloading the software Cerberus. Through malware, cyber criminals can steal data and thus clean up bank accounts.

The dangerous site looks like this:

inpost scam 1

Meanwhile, InPost email messages look like this:

inpost scam 2

And the application like this:

inpost scam 3

Remember that InPost never sends messages with links pointing to websites outside the domain. Always analyze exactly what the link you click on looks like.

Source: InPost