The mBank has issued a warning to its clients that the unknown group of fraudsters has been training to gain access to the clients' accounts by sending them an e-mail message containing a malicious attachment and a information about the change of the account's format.

The false message states that:
"The mBank needs to change the account format. To confirm the operation, please define a new account number as a defined recipient. The new account number will be active after 7 days, if the operation is not confirmed the transfer of funds to your account will not be possible."

If the recipient of the false message clicks on the attached link, he or she is redirected to a fraudulent bank page. There the client is asked to enter a code from the received SMS message. By entering the code the client permits the fraudsters to change the current defined recipient.

Typically, in such a situation, the bank advises the clients to scan the computer for malicious content with antivirus software and to change passwords to the on-line banking service, preferably on another device.