A recent phishing scam targeting Moroccan phone users through malicious text messages highlights the increasing threat of online fraud and stresses the importance of cybersecurity awareness.
These messages, often in Arabic or French, falsely inform recipients of a package waiting at a warehouse, delayed due to incomplete information. They include a link urging the recipient to confirm their address quickly to avoid further delays.
Clicking the link redirects users to a fraudulent website designed to mimic legitimate delivery companies, banks, or postal services. The website’s convincing appearance enhances its ability to deceive victims.
Once on the site, victims are prompted to enter personal details, starting with their address and phone number, and eventually escalating to sensitive financial information such as bank card details. The ultimate goal of these scams is to steal financial data for unauthorized purchases or to drain victims’ accounts.
Hespress EN spoke with two Moroccan victims who shared their experiences with these deceptive texts. One recipient, receiving a French text claiming a package delay due to an unclear address, sensed something was wrong and avoided clicking the link, despite the website’s dubious appearance.
Conversely, the second victim, lured by a convincing website layout and familiar logos, fell victim to the scam. After entering personal and bank card details, they discovered moments later that 500 Moroccan dirhams had been fraudulently withdrawn from their account.
Dr. Anas Abou El Kalam, a university professor and international information security expert, offered practical advice to Hespress AR to help citizens protect themselves from such scams.
He emphasized the importance of treating suspicious text messages with caution, as legitimate companies rarely request personal information via text.
Additionally, he advised recipients to carefully examine messages for grammatical errors or misspellings, which are often telltale signs of fraudulent communications. Dr. Abou El Kalam also recommended verifying the sender’s identity before responding, suggesting direct contact with companies through known contact details to confirm legitimacy.
Finally, he stressed the installation and regular updating of security software on mobile devices to detect and block phishing attempts, as well as the prudent management of personal information online and the reporting of suspicious messages to authorities to raise awareness and facilitate enforcement against scammers.
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.