When making an online purchase using your computer, copying the Pix code and pasting it on the bank’s website to make the payment may not be as safe as it seems. Therefore, it is good to keep an eye on how you make your payments.
Recently, security company Kaspersky identified a criminal scheme known as GoPix. The main target of this scheme is operations carried out via computer, with the aim of replacing the Pix key in online shopping transactions, not in transfers between people.
And this is where the warning is, because if you make this type of payment, you may be susceptible to the scam.
Image: Exam/Reproduction
Like the new scam it works?
Unlike the Brats virus, which is specific to mobile devices, GoPix is not limited to replacing the Pix key, but can also change the value of the transaction, resulting in significant losses for the victim.
In addition to causing financial losses, you can also have your computer infected by the virus.
The infection process begins with computer contamination. One of the baits used is a fake link to access the WhatsApp Weboften presented with grotesque spelling errors.
When clicking on the malicious link, a page similar to WhatsApp Web is displayed, asking to download a file to grant access. When the download is done, the virus is installed.
This is what happens after the attack
After the computer is infected by the virus, it remains hidden, monitoring the computer’s clipboard. When it detects a Pix code, it quickly changes and replaces it.
Then, as soon as the user pastes the changed code, the money is transferred to the scammers. The value does not change, only the recipient.
Despite the sophistication of the scamFábio Assolini, director of research and analysis at Kaspersky for Latin America, highlights that consumers can detect fraud.
An alternative is to make the payment using the QR code, as the virus only acts on the computer’s clipboard.
To protect yourself, it is essential to avoid false advertisements and give preference to organic results when carrying out online searches.
When making digital payments, it is advisable to carefully check the amount and recipient, refusing suspicious transactions.
Support our work ❤️
If you enjoyed this article, consider leaving a tip to help us keep publishing great content.
