What is Angler Phishing?
Angler Phishing is the latest online scam trend that supplants the identity of the company’s customer service accounts in social media. The name Angler Phishing comes from a Finding Nemo movie character. In the film, a deep-water fish called Anglerfish uses a bright lure to attract its prey and devour them.
Basically, Angler Phishing does the same to its victims. Cybercriminals create false social media accounts of companies, especially banks, on Twitter, Facebook or Instagram.
When users look for support contacting companies through their social media accounts, they are captured by cyber criminals who supplant the company’s identity. The criminal convinces the client to follow specific steps to be redirected to phishing websites where the fraud happens.
In 2015, a study revealed that 19% of social media accounts of companies such as BMW, Amazon, Starbucks, Sony, and Samsung, among others, were false. Fraud Watch International
How does Angler Phishing work?
Normally, the victims of Angler Phishing are unsatisfied costumers. The attack with Angler Phishing begins when a customer complains in social media about the services of a company or financial institution.
When the customer mentions the name of the targeted company on social media, the criminal receives a notification through an alert system.
Immediately, the pirate communicates with the client through a masked account which tries to mirror the company’s official customer service account on social networks.
The aggressor uses a comprehensive language with the client to catch him and convince him that his problem will be solved by clicking on a link to continue the process.
Phishing is the fastest growing fraud in social media. The number of fraudulent social media brand profiles increased 1100% from 2014 to 2016. Fraud Watch International
When the client clicks the link, he is directed to a site where he is invited to log in into his online banking, for example. If the client hasn’t noticed the scam yet and enters their confidential data, the cybercriminal will receive them. In other cases, if you click on the link, malware infects the client’s computer.
Normally, Phishing Angler is more active during weekends or days when criminals know that the company’s online customer service is poorly monitored or inactive.