Bank Warns of Sophisticated Phishing Attack: One Careless Step Could Be Costly
Translated from Lithuanian, summarized and contextualized by DistantNews.
At a glance
- "Artea" bank warns of an ongoing sophisticated phishing attack targeting customers.
- Scammers create fake bank websites and use search engine ads to trick users into entering login credentials.
- The attack allows fraudsters to add a victim's payment card to a digital wallet, enabling fraudulent purchases.
Customers of "Artea" bank are being targeted by a sophisticated phishing scheme that exploits user inattention to steal financial information. The bank is urging vigilance as fraudsters create highly realistic fake bank websites, often ranking higher than the official site in search results.
According to the bank, the attack begins when a user clicks on a fraudulent link, leading them to a visually identical but fake login page. After entering their credentials, a spinning wheel animation appears, mimicking a loading process. In reality, scammers are using the stolen data to add the customer's payment card to a digital wallet, granting them the ability to make purchases at various retailers.
The most important signal we want to convey to every resident: if you cannot log in, that is already a warning. Official bank pages have all security systems installed, and there is no illusion of a long login process when logging in. And the fact that after waiting for a long time, you are asked to enter both PIN1 and the code received via SMS message or email clearly betrays scammers who expect residents' inattention. If you have already entered your login details, then we urge you to contact the bank immediately through official channels and report the incident โ a bank specialist will advise you on further actions.
Dr. Dalia Kolmatsui, head of private client services at "Artea" bank, emphasized a critical warning sign: "If you cannot log in, that is already a warning." She explained that legitimate bank sites have robust security and do not create the illusion of a prolonged login. The request for both a PIN1 code and a secondary code (via SMS or email) on the fake site is a clear indicator of a scam, preying on users who might be in a hurry or experiencing slow internet.
"Artea" bank, in collaboration with the National Cyber Security Center, has already blocked over a dozen fake websites in recent days. Kolmatsui stressed that the attack relies on human reaction rather than advanced technology, with scammers banking on users confirming transactions without careful review. A moment's pause, she noted, can thwart the scheme.
The essence of this attack is not technology, but human reaction. Scammers know exactly that in a hurry or thinking that the internet is just slow, people confirm transactions they haven't even read. One moment's pause โ and the scammers' scheme collapses.
Originally published by Delfi in Lithuanian. Translated, summarized, and contextualized by our editorial team with added local perspective. Read our editorial standards.