Fraudsters are pretending to be Polish Post in an attempt to obtain login credentials for online banking.

The Computer Security Incident Response Team of the Polish financial sector warns against text messages regarding the possibility of obtaining a PIT-37 tax return.

The content of the SMS:"You are entitled to a tax refund from PIT-37 Download online: hxxps: //bit.ly/3B8NNil"
T

he text message includes a link redirecting to a fake Polish Post website. The page includes a form to be submitted to the “Tax Office” in order to obtain a return from PIT. The form requires data such as name and surname, email address, PESEL number.