Crowded PDF Fraud Mods Fake Orders Target Online Sellers, Observers: More Dangerous than Phishing

Liputan6.com, Jakarta – Recently, netizens have been busy sharing a new type of fraud that specifically targets sellers on line or online shop (olshop). This mode is carried out by fraudsters by claiming to be potential buyers and claiming to have sent a PDF containing a list of orders.

Based on monitoring Tekno Liputan6.comWednesday (17/5/2023), many Twitter users disclosed this case, one of which was the account @txtdarionlshop.

In thread (threads) uploaded, this account received a story from a follower. He stated that he had several times received messages from potential customers in various places e-commerce.

However, most of them ask for the WhatsApp contact of the owner or admin online shop. Instead of ordering directly through a shopping application, these fraudsters instead send a file they call a PDF of the order list.

He suspected the file after noticing several differences in the appearance of the file with the PDF, which is generally sent via WhatsApp.

Apparently, the PDF is an APK (Android Package Kit) which is simply renamed.

“From mincop take note anywayactually this file yeah APK files but renamed (renamed) to .pdf,” wrote the account admin in his tweet quoted on Wednesday (17/5/203).

If the file is opened and executed, it is very likely that the APK will steal certain data on the victim’s device.

The Latest Fraud Mode?????Mincop has received many reports from netizens that there is a new mode of fraud, namely using a PDF file. Do you know yet, Gess? pic.twitter.com/zs7umhXSZf

— txt olcop (@txtdarionlshop) May 15, 2023

Advertisement

Responding to this case, cyber security observer, Alfons Tanujaya, explained that the mode of online fraud is principally an SMS thief APK. Previously, this method was also used by persons claiming to be parcel couriers, wedding invitations or reprimands from the tax office.

“Everything is aimed at making the recipient click and run the file that was sent, which is actually an SMS thief APK,” said Alfons, contacted Tekno Liputan6.comWednesday (17/5/2023).

Then, is this mode included in a type of phishing scam?

An increasingly connected world makes many parties vulnerable to becoming victims of cybercrime. The city of Los Angeles in the US is fighting this crime through an app that collects and shares important info about the threat of hacking attacks. Here’s Hel’s report…