Email fraud replaces DGT with excuses for unpaid fines

The Internet Security Office discovered a fraudulent e-mail campaign (phishing) imitating the Directorate-General for Traffic (DGT), which contains a link that, when clicked, downloads malicious software (malicious files) to the device. According to this office of the National Institute of Cyber ​​Security (Incibe), the identified emails contain the following topic to provoke the interest of the user: “Blocking of vehicles – unpaid fines.”

The source, who took the security warning medium seriously, does not rule out the possibility of other emails on different topics, but for the same purpose: to encourage the user, to download the file under the pretext of interest, using engineering techniques. Do so.Social. Sending mail is characterized by the fact that the sender is identified as the Ministry of Interior; For image content of official logos that seek to give mail more credibility; And for the delivery of a link that’s supposedly owned by DGT’s electronic headquarters, but clicks on it to redirect to a domain that downloads the malware.

It also uses a domain in the sender’s email (the part that goes after @) that’s supposedly belongs to the official DGT domain, the Internet Security Office explains on its website. If you click on an image that hides a fraudulent link (electronic header access), the .zip file that contains the malware will be automatically downloaded from the device’s web browser.

The office indicates that if a malicious file is downloaded and executed, the user’s device may be infected. In this regard, keep in mind that in addition to scanning them for upgraded antivirus software, Incibe offers response and support services to eliminate malware on security incidents. If the downloaded file is not running, the device may not be infected; You just need to delete the file that will be in the download folder and also send the received mail to the trash.

Remember from your office and Incibe that if you have any doubts about the legitimacy of your email, do not click on the link and contact the company or service that allegedly sent the email, always through its official channels.Customer service. In this case, DGT offers Citizen Service Phone Number 060.

It is always advisable to periodically back up all the information that the user deems important so that it is not lost in the event of a security incident on the device. Devices must also be up to date and always protected with antivirus software.