KB Kookmin Card impersonation phishing abuses device-linking feature
An attack was identified in which text messages impersonating KB Kookmin Card card-issuance and payment notices lured victims into contacting fake customer service centres and installing remote-control programs and malicious apps. By abusing stolen accounts and smartphones' feature for linking other devices, the attackers were able to maintain access even after the apps had been deleted.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Text messages impersonating card notices luring installation of remote-control programs and malicious apps, plus abuse of stolen accounts and device-linking feature
- Location
- South Korea
If your data was exposed
Exposed dataUsername
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- A phishing technique impersonating KB Kookmin Card and abusing smartphones' device-linking feature came to light.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.