Harap semua berhati-hati sekiranya menerima mesej yang menghantar fail mampatan berformat .zip (seperti contoh: “Account Statement.zip”) sama ada daripada kenalan mahupun nombor tidak dikenali.
Taktik Scammer:
Menghantar fail berformat .zip kononnya berkaitan dokumen penting (cth: penyata akaun, resit bayaran, invois kewangan).
Meminta penerima memajukan (forward) fail tersebut kepada pihak lain seperti bahagian kewangan / akaun atau membukanya untuk semakan.
Bahaya: Di dalam fail .zip tersebut berkemungkinan besar terdapat perisian hasad (malware / trojan) atau fail .apk berbahaya yang boleh mencuri maklumat perbankan, kata laluan serta menggodam peranti anda jika diekstrak dan dibuka!
Tindakan Anda:
1. JANGAN muat turun atau buka fail .zip tersebut.
2. Sahkan (Confirm) dahulu dengan penghantar melalui saluran lain (cth: buat panggilan suara secara terus) untuk memastikan sama ada mesej itu sahih atau akaun mereka telah digodam.
3. Jangan panjangkan (forward) mesej tersebut kepada rakan sekerja atau pihak lain.
4. Sekiranya ragu-ragu, segera padam perbualan dan sekat nombor berkenaan.
Kongsikan peringatan ini kepada rakan sekerja, keluarga, dan kenalan anda agar tidak menjadi mangsa!
⚠️ SECURITY ALERT: LATEST SCAM TACTIC USING .ZIP FILES! ⚠️
Please be vigilant if you receive any message containing a compressed .zip file (e.g., “Account Statement.zip”), whether from a known contact or an unfamiliar number.
The Scam Tactic:
Scammers send a .zip file masquerading as important official documents (e.g., bank statements, payment receipts, financial invoices).
They instruct recipients to forward the file to others, such as the Finance/Accounts department, or to open it to check for discrepancies.
The Risk: Hidden inside the .zip file is often dangerous malware, trojans, or malicious .apk files designed to compromise your device, hijack accounts, or steal banking credentials once opened.
What You Should Do:
1. DO NOT download or open the .zip file.
2. Verify directly with the sender via a separate channel (e.g., direct phone call) to confirm if the message is genuine or if their account has been compromised.
3. DO NOT forward the file to colleagues or other departments.
4. If suspicious, delete the message immediately and block the sender.
Share this alert with your team, family, and friends to keep everyone safe!
