Be careful with your SMS, a campaign of scams in the reception of packages arrives in France

Sending and receiving packages is fertile ground for the proliferation of digital scams. Although well identified by Cyber ​​​​Malveillance, the digital security prevention and assistance service, this practice still continues. At least that is what Sekoia.IO observes.

The French cybersecurity publisher, which offers an attack detection service to its clients, has identified a phishing campaign based on sending SMS, Numerama reported. Pretending to send a package, the message invites you to click on a link.

A group of Chinese hackers

Sekoia.IO has carried out research to find out the behavior of phones in the face of this campaign aimed at France, but also at Japan, South Korea, Taiwan, Germany, the United Kingdom and the United States. It turns out that the link redirects differently depending on the phone model.

Once installed, the MoqHao malicious app, the work of the Chinese hacker group Roaming Mantis according to McAfee, requests permission to access contacts and messages. The objective is, therefore, to recover this data in order to send new malicious SMS.

200,000 caught SMS sent

In its blog, the French publisher counted 70,000 SMS sent in mid-July, but since then this number has increased to 200,000. Despite everything, France is the least affected country, Sekoia.IO found.

To increase their chances of success, the attackers have localized their attacks. Therefore, links sent in France cannot be opened outside the territory. This allows the language to be adapted to the target population and thus to camouflage the malicious operation.

In case you receive this SMS, or any doubtful message, the ideal is not to click on the links it contains. If you have installed the MoqHoa app, know that it takes features from the Chrome browser. Therefore, it is possible to identify and remove it in your phone settings. Then it is recommended to restart the device.