Jakarta, CNN Indonesia —
Experts investigate the modus operandi of crimes that are the culprits from breaking into customer money at Jenius bank BTPN to hundreds of millions of people being affected phishing fake site with method social engineering.
CISReC security expert, Pratama Persada said there is a possibility of phishing practices, one of which is asking for someone’s personal data by sending a website URL that is similar to the original website of the banking service provider. Though it was a fake site meant for fishing (phishing) users provide their personal data.
“Usually the target is asked to send biodata and even username and password. From here the perpetrators can go further and carry out transactions that seem legal and according to the system,” said Pratama to CNNIndonesia.com, via text message, Wednesday (28/7) night.
He said the data entered by users through the website is the data capital for actors to target certain targets that have the most data and are easy for social engineering to do.
Social engineering is a technique used by manipulating by deceiving the victim’s psychology. This method is done so that the perpetrator can gain access or obtain information on credential data such as the victim’s user name and password.
A few days ago, a Jenius Bank BTPN customer, Riri admitted that he had lost Rp110 million. At first he was called by a person claiming to be from the Jenius service belonging to the bank BTPN. Then the caller asks him to fill in a certain link.
After filling in the data on the link, Riri became suspicious when the person concerned found out that Riri had another bank account. Furthermore, the caller also asked Riri to mention another bank account, but she refused.
Riri then went to the BTPN bank office the next day. At that time he just found out that the balance in his Jenius account only had Rp1 left. The fraudsters also broke into all of Riri’s deposits, resulting in a total loss of Rp110 million. Unfortunately, he did not receive a deposit disbursement notification from Jenius, namely the Jenius Maxi Server.
Due to the alleged phishing practice, Pratama advises not to easily provide personal data, with registration requirements or the lure of raffle prizes.
“Even if you have to provide data, make sure the company is not fake, has official permission. At least sensitive data does not change hands easily, don’t also reveal personal data,” he said.
Personal Data Sale, Cheap Sale on the Internet
–
– .
