A new phishing email scam, directed at Chase Bank customers, has a new twist. Most scammers only ask for personal login information, this new scam is asking the user to upload a selfie and photos of the front and back of the identification card of the user. The email starts by saying that there is an issue with the account and directs the victim to a rather convincing landing page. It then asks the user for login credentials and finally to upload the photos. If the user does input all the information, then the scammer has all the information necessary to completely take over an identity. Asking someone to upload their ID is not uncommon. Usually, it is used when creating accounts, transferring large sums of money or to legally purchase cryptocurrency.
Written by: Nataliia Zdrok, Threat Intelligence Analyst at Binary Defense Russia’s invasion of Ukraine increased