How did OCBC phishing SMS messages trick victims into giving credentials?

Question

Accepted Answer

OCBC Phishing SMS Messages Deceived Victims Through Fake Bank Communications and Malicious Websites

OCBC phishing SMS messages tricked victims by impersonating the bank and directing them to fraudulent websites designed to steal their login credentials. These messages contained fabricated banking-related issues, prompting recipients to click on a link that led to a fake OCBC bank login page. Once on the deceptive site, victims were coerced into entering their electronic banking login details and one-time passwords, thereby granting unauthorized access to scammers.
Deceptive SMS Messages Mimicked Official Bank Communications

The modus operandi involved gang members sending SMS messages to unsuspecting individuals, falsely presenting themselves as representatives of OCBC bank. These communications were crafted to appear legitimate, often citing urgent or important banking matters that required immediate attention from the recipient. The content was designed to create a sense of urgency or concern, making victims more likely to act without critical examination.
Fake Login Pages Harvested Sensitive Credentials

Following the deceptive SMS, victims were directed to a website that was an exact replica of the official OCBC bank login portal. This phishing page was meticulously designed to look authentic, further eroding the victim's suspicion. Upon entering their username, password, and any subsequent one-time passwords (OTPs) generated for verification, these sensitive credentials were captured by the scammers. This enabled the criminals to gain illicit control over the victims' bank accounts.
Scammers Gained Account Control and Initiated Unauthorized Transfers

With the stolen login credentials, the unknown scammers were able to access and take full control of the victims' OCBC bank accounts. The immediate action taken by the perpetrators was to change the account holders' login details and associated contact information without authorization. This effectively severed the victims' ability to regain access to their own accounts, paving the way for the scammers to freely transfer funds out to various bank accounts, both within Singapore and internationally.

Reading history

Hide →

This history is cleared when the page is closed.

How did OCBC phishing SMS messages trick victims into giving credentials?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends