Monday, Feb 6, 2023
English News
  • Hyderabad
  • Telangana
  • Andhra Pradesh
  • India
  • World
  • Entertainment
  • Science and Tech
  • Sport
  • Business
  • ...
    • NRI
    • View Point
    • cartoon
    • Columns
    • Reviews
    • Education Today
    • Property
    • Videos
    • Lifestyle
    • Rewind
E-Paper
  • NRI
  • View Point
  • cartoon
  • Columns
  • Reviews
  • Education Today
  • Property
  • Videos
  • Lifestyle
  • Rewind
Home | Business | Hackers Hit Sbi Users With Text Phishing Scam

Hackers hit State Bank of India users with text phishing scam

The link associated with the text messages redirects the user to a fake website and on the landing page, the user is asked to submit personal information along with sensitive financial details like card number

By IANS
Published Date - 04:57 PM, Mon - 1 March 21
Hackers hit State Bank of India users with text phishing scam
Representational Image

New Delhi: Several users of the State Bank of India (SBI) have been targeted with a phishing scam where hackers have flooded them with suspicious text messages, requesting them to redeem their SBI credit points worth Rs 9,870.

The link associated with the text messages redirects the user to a fake website and on the landing page, the user is asked to submit personal information along with sensitive financial details like card number, expiry date, CVV and Mpin in a ‘State Bank of India Fill Your Details’ form.

According to the investigation by New Delhi-based think tank CyberPeace Foundation along with Autobot Infosec Private Ltd, the website collects data directly without any verification and is registered by a third party instead of having the registrant organisation name of State Bank of India, making it all the more suspicious.

“Moreover, according to SBI, they never communicate with their customers via SMS or emails containing links with regard to the user’s account. Any reputed banking entity also does not use WordPress like CMS technologies on their official website for security reasons,” the foundation said.

The personal information sought on the malicious website is name, registered mobile number, email, email password and date of birth.

After the form is submitted, the user is directed to a “thank you” page.

“The domain name of the website can be traced to India, and the registrant state was found to be Tamil Nadu,” the report mentioned.

According to the report, it was observed that the form takes user inputs without performing basic validation of data type.

For example, the registered mobile number field, which should only accept numerical values also accepts text input. This can also be confirmed from the source code, where the input type for the field is mentioned as ‘text’ instead of ‘number’ or ‘tel’.

“The email password field shows the entered password in clear text instead of keeping the characters hidden. A similar source code observation is noted,” it added.

“The card number field accepts an infinite number of digits instead of only 16 digits, which SBI cards usually have. All these instances of negligence clearly indicate bad coding practice,” the foundation said.

  • Follow Us :
  • Tags
  • New Delhi
  • SBI
  • State Bank Of India

Related News

  • American airlines offloads cancer patient in Delhi

    American airlines offloads cancer patient in Delhi

  • Bail conditions may be relaxed if bonds not produced in a month, SC to courts

    Bail conditions may be relaxed if bonds not produced in a month, SC to courts

  • Air quality in Delhi set to deteriorate over next 2 days

    Air quality in Delhi set to deteriorate over next 2 days

  • Republic Day chief guest Egyptian President Sisi to arrive in New Delhi today

    Republic Day chief guest Egyptian President Sisi to arrive in New Delhi today

  • Watch: Korutla police foil ATM money heist in movie style in Jagtial

    Watch: Korutla police foil ATM money heist in movie style in Jagtial

  • Telangana’s Esha Singh wins gold in national shooting trials

    Telangana’s Esha Singh wins gold in national shooting trials

Latest News

  • Drinking water supply to be disrupted in parts of Hyderabad on Feb 8

    13 mins ago
  • Hyderabad’s Dhiraj wins doubles title at ITF Juniors Tennis Tournament

    17 mins ago
  • Rachakonda police arrest man harassing and threatening woman

    17 mins ago
  • Telangana’s Samuel emerges champion at V4 Chess Tournament

    21 mins ago
  • Horse Racing: Thanks fancied for Hyderabad feature

    26 mins ago
  • Horse Racing: Miracle Mary and Original Sin shine in trials

    29 mins ago
  • Hyderabad: Four held for attacking fast food centre staff

    30 mins ago
  • Siddharth-Kiara wedding: Guests to feast on 100 dishes from 10 countries

    39 mins ago

company

  • Home
  • About Us
  • Contact Us

business

  • Subscribe

telangana today

  • Telangana
  • Hyderabad
  • Latest News
  • Entertainment
  • World
  • Andhra Pradesh
  • Science & Tech
  • Sport

follow us

© Copyrights 2022 TELANGANA PUBLICATIONS PVT. LTD. All rights reserved. Powered by Veegam