{"id":246006,"date":"2026-03-12T14:03:11","date_gmt":"2026-03-12T14:03:11","guid":{"rendered":"https:\/\/bm.dev.synology.me\/?p=246006"},"modified":"2026-03-12T14:03:11","modified_gmt":"2026-03-12T14:03:11","slug":"bitdefender-peste-un-milion-de-romani-au-primit-sms-uri-frauduloase-de-livrare-in-cea-mai-mare-campanie-de-inselatorie-online-din-2026","status":"publish","type":"post","link":"https:\/\/bm.dev.synology.me\/?p=246006","title":{"rendered":"Bitdefender: Peste un milion de rom\u00e2ni au primit SMS-uri frauduloase de livrare \u00een cea mai mare campanie de \u00een\u015fel\u0103torie online din 2026"},"content":{"rendered":"<p>\nCercet\u0103torii \u00een securitate informatic\u0103 de la&nbsp;Bitdefender&nbsp;au identificat o&nbsp;campanie de \u00een\u015fel\u0103torie la scar\u0103 larg\u0103 care vizeaz\u0103 utilizatorii din Rom\u00e2nia. Atacatorii trimit SMS-uri care par s\u0103 vin\u0103 de la FAN&nbsp;Courier,&nbsp;liderul pie\u0163ei&nbsp;locale de curierat, \u015fi \u00eei direc\u0163ioneaz\u0103 pe destinatari c\u0103tre un site fals&nbsp;prin care hackerii preiau&nbsp;controlul&nbsp;contului&nbsp;de&nbsp;WhatsApp&nbsp;\u015fi&nbsp;solicit\u0103&nbsp;mai apoi&nbsp;bani cunoscu\u0163ilor victimei.&nbsp;<\/p>\n<p>\nConform datelor&nbsp;Bitdefender, peste un milion de oameni au primit aceste mesaje. Campania nu presupune instalarea&nbsp;unei&nbsp;amenin\u0163\u0103ri informatice&nbsp;pe telefon, ci&nbsp;se bazeaz\u0103 pe manipulare psihologic\u0103 \u015fi pe furtul datelor de&nbsp;acces.&nbsp;<\/p>\n<p>\n<strong>Cum func\u0163ioneaz\u0103 atacul<\/strong><\/p>\n<p>\nVictima prime\u015fte un SMS care o informeaz\u0103 c\u0103 un colet este asociat num\u0103rului s\u0103u de telefon \u015fi c\u0103 trebuie s\u0103 aleag\u0103&nbsp;un&nbsp;locker&nbsp;pentru ridicare. Mesajul&nbsp;arat\u0103 ca&nbsp;o notificare legitim\u0103 de livrare, ceea ce face ca mul\u0163i oameni s\u0103 acceseze link-ul&nbsp;f\u0103r\u0103 suspiciuni.&nbsp;Link-ul duce c\u0103tre un&nbsp;site care copiaz\u0103 identitatea vizual\u0103&nbsp;FAN Courier, dar care este g\u0103zduit pe un domeniu controlat de atacatori. \u00cen paralel, hackerii ini\u0163iaz\u0103 re\u00eenregistrarea num\u0103rului de telefon al victimei pe un alt dispozitiv. WhatsApp trimite un cod de verificare real pe telefonul victimei, iar pagina fals\u0103 \u00eei solicit\u0103 s\u0103 introduc\u0103 acel cod, sub pretextul confirm\u0103rii livr\u0103rii.&nbsp;<\/p>\n<p>\nOdat\u0103 ce victima introduce codul, atacatorii finalizeaz\u0103 procesul de autentificare pe dispozitivul lor \u015fi preiau controlul contului de&nbsp;WhatsApp. Victima nu \u015ftie c\u0103 a autorizat transferul&nbsp;\u015fi nu are&nbsp;nicio amenin\u0163are informatic\u0103&nbsp;instalat\u0103 de c\u0103tre atacatori&nbsp;pe telefon.&nbsp;<\/p>\n<p>\n<strong>Ce se \u00eent\u00e2mpl\u0103 dup\u0103 preluarea contului<\/strong><\/p>\n<p>\nDup\u0103 preluarea contului, atacatorii contacteaz\u0103 persoanele din lista victimei \u015fi le trimit cereri urgente de bani. Mesajele men\u0163ioneaz\u0103 de obicei o urgen\u0163\u0103 \u015fi promit returnarea sumei a doua zi.&nbsp;\u00cen unele cazuri, atacatorii cer ca banii s\u0103 fie trimi\u015fi \u00eentr-un cont bancar diferit. Exist\u0103 indicii c\u0103 aceste conturi, uneori deschise la b\u0103nci rom\u00e2ne\u015fti, apar\u0163in unor persoane care au pierdut la r\u00e2ndul lor accesul la conturile bancare \u00een urma altor tipuri de atacuri informatice.&nbsp;<\/p>\n<p>\nDeoarece cererile de bani vin de la un contact de \u00eencredere, destinatarii au tendin\u0163a s\u0103 r\u0103spund\u0103 f\u0103r\u0103 s\u0103 verifice situa\u0163ia. Aceast\u0103 a doua faz\u0103 a atacului este cea care genereaz\u0103 c\u00e2\u015ftigul financiar pentru atacatori.&nbsp;<\/p>\n<p>\n<strong>Indicii pentru a&nbsp;recunoa\u015fte mesajele false<\/strong><\/p>\n<p>\nExist\u0103 mai multe semnale de alarm\u0103: domenii suspecte care nu corespund site-ului oficial&nbsp;FAN&nbsp;Courier, mesaje trimise de la numere de telefon aleatorii \u015fi, cel mai important, cererea de a introduce un cod de confirmare WhatsApp.&nbsp;Niciun serviciu de curierat legitim nu va solicita vreodat\u0103 un&nbsp;astfel cod de verificare.&nbsp;<\/p>\n<ul>\n<li>\nNu accesa\u0163i link-uri de curierat primite prin SMS-uri nea\u015fteptate.&nbsp;<\/li>\n<\/ul>\n<ul>\n<li>\nIntroduce\u0163i manual adresa oficial\u0103 a curierului \u00een browser.&nbsp;<\/li>\n<\/ul>\n<ul>\n<li>\nNu introduce\u0163i niciodat\u0103 coduri de verificare&nbsp;WhatsApp&nbsp;\u00een afara aplica\u0163iei&nbsp;WhatsApp.&nbsp;&nbsp;<\/li>\n<\/ul>\n<ul>\n<li>\nActiva\u0163i verificarea \u00een doi pa\u015fi \u00een WhatsApp (Set\u0103ri \u2192&nbsp;Cont \u2192 Verificare \u00een doi pa\u015fi).&nbsp;&nbsp;<\/li>\n<\/ul>\n<ul>\n<li>\nVerifica\u0163i telefonic&nbsp;cu persoana care solicit\u0103 banii&nbsp;orice cerere urgent\u0103&nbsp;primit\u0103 pe&nbsp;WhatsApp.&nbsp;<\/li>\n<li>\nFolosi\u0163i aplica\u0163ia oficial\u0103 a companiei de curierat pentru a verifica statusul livr\u0103rii coletelor \u015fi a \u00eentreprinde alte opera\u0163iuni.&nbsp;<\/li>\n<\/ul>\n<p>\n<strong>M\u0103suri imediate \u00een cazul pierderii contului de WhatsApp<\/strong><\/p>\n<ul>\n<li>\nRe\u00eenregistra\u0163i num\u0103rul de telefon \u00een&nbsp;WhatsApp sau reinstala\u0163i aplica\u0163ia.&nbsp;<\/li>\n<\/ul>\n<ul>\n<li>\nAnun\u0163a\u0163i contactele prin canale alternative s\u0103 ignore orice cerere de bani venit\u0103 de pe contul dvs.&nbsp;<\/li>\n<\/ul>\n<ul>\n<li>\nDac\u0103 atacatorii au activat verificarea \u00een doi pa\u015fi \u00eenainte ca&nbsp;dvs. s\u0103&nbsp;relua\u0163i&nbsp;accesul, recuperarea contului poate necesita parcurgerea procesului de resetare de securitate al WhatsApp.&nbsp;<\/li>\n<\/ul>\n<p>\n&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cercet\u0103torii \u00een securitate informatic\u0103 de la&nbsp;Bitdefender&nbsp;au identificat o&nbsp;campanie de \u00een\u015fel\u0103torie la scar\u0103 larg\u0103 care vizeaz\u0103 utilizatorii din Rom\u00e2nia. Atacatorii trimit SMS-uri care par s\u0103 vin\u0103 de la FAN&nbsp;Courier,&nbsp;liderul pie\u0163ei&nbsp;locale de curierat, \u015fi \u00eei direc\u0163ioneaz\u0103 pe destinatari c\u0103tre un site fals&nbsp;prin care hackerii preiau&nbsp;controlul&nbsp;contului&nbsp;de&nbsp;WhatsApp&nbsp;\u015fi&nbsp;solicit\u0103&nbsp;mai apoi&nbsp;bani cunoscu\u0163ilor victimei.&nbsp; Conform datelor&nbsp;Bitdefender, peste un milion de oameni au primit [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[510],"tags":[8039,7555,7942,246,14909,539,31857,173,8506],"class_list":["post-246006","post","type-post","status-publish","format-standard","hentry","category-actualitate","tag-bitdefender","tag-campanie","tag-cont","tag-crestere","tag-livrare","tag-online","tag-primire","tag-romani","tag-sms"],"_links":{"self":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/posts\/246006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=246006"}],"version-history":[{"count":0,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/posts\/246006\/revisions"}],"wp:attachment":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=246006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=246006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=246006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}