Poland's national computer emergency response team CERT Polska warned on X on 12 November 2026 about a new SMS campaign in which fraudsters pose as police units, including traffic departments and regional police headq…
Source: x.com · published
Poland's national computer emergency response team CERT Polska warned on X on 12 November 2026 about a new SMS campaign in which fraudsters pose as police units, including traffic departments and regional police headquarters. The texts claim the recipient's vehicle was parked illegally and urge quick payment of a fine. Screenshots CERT Polska published show the message linking to hxxps://15844[.]eu[.]cc/vehicle-gov/pl and a fake page styled as a Polish government service (with the Chancellery of the Prime Minister's address in the footer) that asks for a driving-licence number and then payment-card details, which go straight to the fraudsters. Polish police and government services are being impersonated and are not involved. CERT Polska advises checking the web address, not acting under time pressure, verifying through official police channels, and forwarding suspicious texts free of charge to 8080.
Messages that claim to come from the police or another government service, especially about a fine, a refund or an investigation, are a common way to steal card details, identity documents or a login. Real agencies do not demand immediate payment by a link in a text, or ask you to type a driving licence and a card number on a look-alike page. Go to the official website or app you already use, or call a number from a statement or a government directory, not from the message. If you entered card or document details, contact your bank and report the texts to your national CERT or police cyber unit.
Source: https://x.com/CERT_Polska/status/2120887046239551591 (@CERT_Polska, Nov 12, 2026, 9:30 AM ET)
CSIRT Italia warns of renewed smishing claiming PagoPA/SEND fines; links lead to send-au.eu.cc to steal logins and card data. PagoPA and SEND are impersonated.
Security researcher @catnap707 posted on X on 12 November 2026 about fake websites (偽サイト) impersonating the Tokyo Metropolitan Police Department (警視庁). The post lists the links jp[.]kdfz[.]net, jp[.]kstw[.]net, jp[.]k…
The Royal Gazette reported on 12 November 2026 that the Bermuda Police Service has received reports of people being phoned by callers using Bermuda's 1 (441) code who claim fraudulent activity was detected on the pers…
Security researcher @masaomi346 posted on X on 12 November 2026 about Android malware impersonating Rakuten (楽天), the Japanese e-commerce and financial services group, linking a VirusTotal analysis of the sample. The…
Security researcher @masaomi346 posted on X on 11 November 2026 about Android malware impersonating FamilyMart (ファミリーマート), the Japanese convenience store chain, distributed from hxxps://hanwgsercassa.eu[.]cc/, tagged…
PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…