Phishing Campaign Targets Revolut Customers After Data Breach
In the wake of a data breach, Revolut customers are facing a new threat as phishing texts have started to appear. Just days after the digital bank acknowledged that it had disclosed sensitive customer records to an unauthorized party, affected individuals began receiving suspicious messages. The connection between these phishing attempts and the breach has not yet been established, leaving customers on high alert.
Revolut admitted to accepting fraudulent information requests from an email address that appeared to belong to a legitimate government agency. This social engineering tactic allowed criminals to obtain various types of customer information without directly accessing Revolut's systems.
The company has stated that only a limited number of customers were affected and that it has reached out to them directly. However, the situation escalated when one customer reported receiving a phishing text on September 14, just two days after the breach was publicly acknowledged. The message was designed to blend in with other legitimate texts from Revolut, making it appear as if it originated from the bank itself.
Security analysis from VirusTotal indicated that the phishing domain was first scanned on the same day the text was received. Another customer recounted that clicking the link in the message led to a webpage that requested access to their device's camera. This page mimicked Revolut's identity verification process, prompting users to enter their passwords under the guise of a legitimate security check.
Scammers Exploit Trust to Deceive Users
Such tactics are common among scammers, as they aim to lower suspicion and extract sensitive information from victims. If the phishing campaign is indeed linked to the data breach, the combination of information obtained from Revolut and login details provided by victims could facilitate account takeovers.
Case Closed
As the investigation continues, it remains uncertain whether the phishing campaign is exploiting the data exposed in the breach or if it is an unrelated scam targeting Revolut customers. Regardless, it is crucial for users to remain vigilant and treat unexpected messages regarding their accounts with caution.
To mitigate risks, users are encouraged to utilize security tools that can help block phishing attempts and malicious sites. Malwarebytes Browser Guard, for instance, offers automatic protection against such threats, allowing users to browse more safely online.
