Beware of messages such as au and KDDI SMS phishing scams and "important notices from au"

news

Request payment with iTunes Gift Card as there are unpaid charges

The Phishing Countermeasures Council has released information, saying that reports of SMS (short messages) that lead to au and KDDI and phishing sites are increasing. The site is up and running as of 11:00 on November 26th, so keep an eye out for it.

Multiple contents such as the following have been confirmed in the text of the SMS, and access to the URL described as the usage amount exceeds the set amount, the payment of the usage fee cannot be confirmed, the payment deadline has passed, etc. I'm inducing you to do it.

The destination is a website disguised as an au ID, and you are required to enter your au ID (mobile phone number, email address, etc.). When you enter it, the password entry screen is displayed, and when you enter it further, a message that there is an unpaid amount is displayed as "Important notice to customers".

Tap "Check payment status" displayed below the message to display the billing amount and payment method selection screen. On this screen, convenience store payments and online banking are said to be "service suspension due to maintenance", and only electronic money (payment by iTunes gift card) can be selected. After selecting, the gift certificate number input screen will be displayed continuously. In the case of Android smartphones, it may lead to the installation of malicious applications.

The URL of the phishing site to which you are directed is "https://bit.ly/3●●●●" in the SMS, and "http: //●●●●.duckdns.org/" and "https::" in the forwarding destination. //●●●●.duckdns.org// ”has been confirmed. Be aware that other similar domain names may be used.

The Phishing Countermeasures Council points out that "phishing sites are often created by copying the screens of real sites and are extremely difficult to distinguish." On top of that, since similar phishing sites may be published, please be careful not to use email or SMS links when logging in to the service, but to access from the official app or bookmarks of the web browser. I'm urging you.