SINGAPORE – Authorities Investigating a Fraudulent Website

Authorities are actively investigating a fraudulent website that is posing as a government portal designed to inform Singaporeans of the various support schemes available to them. This alarming phishing campaign was uncovered by the cybersecurity firm Group-IB, which released a statement on December 13 detailing how this deception operates.

Details of the Scam

According to the findings, unsuspecting victims received SMS messages containing links that directed them to a fake version of the legitimate SupportGoWhere website. Once on this bogus site, they were prompted to enter sensitive personal information, including credit card details for "verification." To add to the deceit, victims were also asked to provide their bank's two-factor authentication code in order to claim the non-existent subsidies.

Widespread Phishing Operation

Group-IB highlighted that this phishing operation started in mid-December and is linked to 20 other fraudulent sites, with an astonishing 612 dormant sites suspected to belong to the same criminals. This indicates a widespread and organized effort aimed at exploiting the public.

Connection to Other Fraudulent Schemes

Further analysis revealed that the same tactics employed in this scam have been seen in other fraudulent schemes, which also involve requests for personal information to resolve fake issues such as parking fines or failed deliveries.

Expert Advice on Scam Vigilance

"By impersonating trusted entities like government initiatives, these attackers are taking advantage of public trust and urgency," stated Mr. Vladimir Kalugin, operational director of Group-IB's Unified Products. His cautionary advice for individuals is clear: "It is crucial to remain vigilant and cautious when receiving unsolicited messages, especially those that ask for personal or financial information."

Government's Response

The police have confirmed that an official report has been filed regarding this scam. A spokesperson from the Government Technology Agency, responding to inquiries on December 23, acknowledged the serious nature of malicious websites and assured the public of their ongoing efforts to combat these threats. With initiatives like ScamShield and the Scam Analysis and Tactical Intervention System, authorities are successfully disrupting hundreds of malicious websites daily. However, they cautioned that, due to the ever-increasing number of scams, some might evade detection.

Public Advisory

To help protect against falling victim to such scams, the spokesperson advised the public to refrain from scanning or clicking on unknown QR codes and links from unfamiliar sources. It's important to note that authentic SMS communications from government agencies should originate from the “gov.sg” sender ID. For those who are uncertain, exceptions can be reviewed at sms.gov.sg/exceptions.

How to Verify Links

Before submitting any personal information, individuals should ensure that any links lead to legitimate government websites that end in “.gov.sg.” Additionally, any suspicious messages or phishing attempts should be reported through ScamShield or other official channels.

Conclusion

Stay alert and protect yourself from scams — your vigilance is the best defense against cybercrime!