The SMS infrastructure of Kamil Koç, which was acquired by FlixBus in the past, has been attacked. The messages sent to the company's customers contained fraudulent links. Through these links, unauthorized access to users' bank accounts is being attempted.
As reported by Donanım Haber, cybercriminals seized control of Kamil Koç's SMS system and shared fake links specifically targeting VAKIFBANK customers. The message included the phrase, "Special 0% interest loan opportunity up to 300,000 TL for SkyLimit users from VAKIFBANK," followed by a link directing users to a fake site that mimics VakıfBank's official internet banking portal.
The banking information of individuals who click on this link and attempt to log into their bank accounts is being captured by malicious actors. Although the design of the site completely resembles the VakıfBank internet branch, the link in question has no connection to the bank. Using this method, scammers steal users' passwords and transfer the money in their accounts to their own accounts.
When examining posts made on social media, it is observed that fake links allegedly belonging to the Binance platform were also sent to some Kamil Koç users. For security purposes, it is advised not to click on links in such suspicious messages coming from Kamil Koç as of 10:00 AM on August 11. No official statement has been made by Kamil Koç regarding the matter yet.
News Source: 12punto
