How this new WhatsApp scam is targeting people who want to work in the UK – Times of India

Phishing scams involving visa applications are quite common in the world of cybercrime. Lately, an ongoing phishing campaign on WhatsApp is trying to dupe individuals who are looking forward to working in the United Kingdom. According to a report by ZDNet, Malwarebytes has discovered a scam where the campaign operators are sending out texts on the Meta-owned instant messaging service claiming themselves to be the UK government, offering “a free visa and other benefits to individuals willing to move to the country.”
The report also mentions that a “similar scam made the rounds” a few months ago that also tried to dupe users “who wanted to work or study in the United Kingdom.” This new phishing campaign is one of those “too good to be true escapades” that users should avoid and be aware of, the report recommends.
How does the scam work
As per the report, the scam initiates with messages sent to numbers through the WhatsApp mobile messaging platform. Users who receive these fraud messages are told that “the UK needs over 132,000 additional workers in 2022, and so the government is running a recruitment drive, with over 186,000 vacant job spots available.” The report also suggests that such “cold-call messages” regarding visas are “red flags in themselves,” however, the phishing attempt doesn’t end there.
The scam message reads, “THE PROGRAM COVERS: Travel expense. Housing. Accommodation. Medical facilities. Applicant must be 16 years or above. Can speak basic English.
BENEFIT OF THE PROGRAM: Instant work permit. Visa application assistance. All nationalities can apply. Open to all individuals and students who want to work and study. Apply here”
Victims who click through this message are landed on a fake domain that masquerades as “a UK Visas and Immigration website.” Users from other countries are also asked to “apply for thousands of jobs already available in the United Kingdom,” the report suggests.
Malicious intentions of the scam
The report also mentions that the fraudulent website intends to collect the private information of visitors which includes “their names, email addresses, phone numbers, marital status and employment status.”
Moreover, the free application form gets “automatically approved,” with whatever data the victim provides and promises to offer, “a work permit, visa, plane tickets and accommodation in the UK for free.” The report mentions that none of the promises is true.
Apart from these, the operator of this phishing campaign then tries to gather even more information and attempts to generate revenue from victims, just like any other scam. The visa applicants are assured that their next form will appear after they have invited either 15 friends or five groups on WhatsApp to make others “aware” of the program.
Finally, victims are redirected to unknown websites that are selling drones or other quiz websites that ask for personal information, including telephone numbers.
Also Read: Flash calls verification method is now available on WhatsApp. Click here to read more.

!(function(f, b, e, v, n, t, s) {
window.TimesApps = window.TimesApps || {};
const { TimesApps } = window;
TimesApps.loadFBEvents = function() {
(function(f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function() {
n.callMethod ? n.callMethod(…arguments) : n.queue.push(arguments);
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = ‘2.0’;
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(f, b, e, v, n, t, s);
fbq(‘init’, ‘593671331875494’);
fbq(‘track’, ‘PageView’);
);if(typeof window !== ‘undefined’) {
window.TimesApps = window.TimesApps || {};
const { TimesApps } = window;
TimesApps.loadScriptsOnceAdsReady = () => {
var scripts = [‘’,
scripts.forEach(function(url) {
let script = document.createElement(‘script’);
if(!false && !false && !false && url.indexOf(‘colombia_v2’)!== -1){
script.src = url;
} else if (!false && !false && !false && url.indexOf(‘sdkloader’)!== -1) {
script.src = url;
} else if (url.indexOf(‘colombia_v2’)== -1 && url.indexOf(‘sdkloader’)== -1){
script.src = url;
script.async = true;

Source link