Irish Water’s official website states ‘The legislation to refund Domestic Water Charges has now passed and refunds have begun.’ and the cybercriminals are wasting no time in attempting to get a piece of the pie for themselves.
The scam arrives as an email, titled ‘Your Irish Water Account – Action required’ and asks the user to ‘Log in now to My Water and complete online account maintenance.’
Clicking on the link redirects victims to a faked Irish Water website, where a pop-up opens immediately, requiring the victims to ‘update’ their Credit / Debit card information and enter their 3D Secure Password.
After handing their payment card details over to the cybercriminals for further abuse, the victims are transferred back to the real Irish Water website, as if nothing has happened.
Irish Water have a part of their website dedicated to spotting these fake emails, where they give some good tips on how to identify and how to correctly react to such emails and where to contact them with additional questions.
ESET Ireland recommends not clicking on any links that arrive in unsolicited emails, as well as checking official websites of institutions, organisations and banks for their security tips, as they’re usually aware of scams abusing their name and offer good advice on staying safe.
Full story with screenshots is available on ESET Ireland’s blog.