Fraudsters inform about upcoming changes to the 500+ program and impersonate the Wirtualna Polska portal.

CERT Poland warns against a new campaign, fraudsters convince their victims that the 500+ benefit program will change its form and will be paid in vouchers. However, for more information one needs to log into their Facebook account. For this purpose a fraudulent link to a login page is attached to the message. However, the website itself is under the domain wiadomosciinewsy(.)live.

The goal of fraudsters is to steal data that can be used to steal money using BLIK, i.e. by impersonating a given person and sending messages to friends asking for a loan of a given amount of money.