Maj. December 25, 2019 at 12 h 18 min.
LeBonCoin is the target of a new scam that is particularly well-crafted. Hackers target exclusively Internet users who have put an article up for sale on the ad site. Using a fake SMS and a dummy application, they will attempt to withdraw money from your Bank Account You are told how to spot the deception.
An elaborate scam is currently trying to trick Internet users who sell articles on LeBonCoin, report our colleagues at Numerama. Initially, you will receive a SMS that ensures that it comes directly from LeBonCoin. This text message announces that a prepayment has been sent to you.
Scammers refer to the secure payment service integrated into the site. This service “allows you to make simple and secure transactions (less than €2,500) for your exchanges between individuals directly from your mailbox”, explains LeBonCoin on the website. Since 2018, the site allows users to pay online by credit card Until the transaction is completed, LeBonCoin holds the money sent by the buyer. This is not the first time a scam has used this system to rip off LeBonCoin users.
The SMS is accompanied by a link that relays to a dummy version of the ads site. Unsurprisingly, the hackers imitated the interface and design of the platform to perfection. To quell the victims’ suspicion, they even add a preview of the ad and posted photos.
However, one detail that can already detect the scam: the URL. As a reminder, the address of the site is none other than “www.leboncoin.fr”. In this case, we could detect the presence of several additional letters,” Numerama points out. To access the official website of Le Bon Coin we advise you to use a Search Engine and to avoid links received by email or SMS.
Related: Holidays Wrecked for 12 Families Who Rented the Same Ghost Apartment on LeBonCoin
Phishing attack targets Android smartphones
To recover the money made available by the buyer, the dummy site will ask you to go through the Android application of LeBonCoin. A link on the site allows you to install the application directly from the Google Play Store.
This is obviously a trap: if you click on it, an APK file will be directly downloaded on your smartphone. Unsurprisingly, Android will repeatedly ask you if you are sure you want to install this APK from an unknown source. At this stage, one can imagine that only the least experienced users will fall for it.
The application follows the design of the LeBonCoin website to the letter. To complete the transaction and receive your money, the application will ask you to provide your Credit card details ( ) and your credit card number (). The hackers are using the currently registered credit card as a pretext to trap Internet users
This is where the trap closes: the pirates retrieve the coordinates of your map. This valuable information can be used to subscribe to paid services or to empty your account. Sometimes scammers will instead sell your card data on Dark Web black markets to avoid potential trouble with fraud detection systems. Have you ever been trapped like this before? We await your testimony in the comments.
Source : Numerama
verifiedtasks
admin
