Alerts and Advisories 23 October 2023

Brunei Postal Services Department Phishing Scam

Advisory

Advisory
23 October 2023

 

Background

BruCERT has received reports of a new phishing scam involving Brunei Postal Services Department. A message which appears to be from “Brunei Postal Services” claims that there is a parcel which cannot be delivered to the recipient due to incomplete address information. The message includes a link that requires the recipient to confirm their address.

The public is advised not to click on the link as it has been classified as malicious, with a risk of leading to a phishing attack.

 

Adv_01

 

Impact

  • Data breaches and identity theft
  • Possible financial loss
  • May lead to further cyber attacks such as ransomware

 

Recommendations

  • Do not click on any unexpected links received by SMS, WhatsApp, social media or email.
  • Check whether the link's URL exactly matches the official web address of the organization.
  • Verify with the local post office for any pending packages.
  • Do not give out personal or confidential information to anyone you are not familiar with.
  • Make sure to use only the official government website gov.bn for any matters involving the sharing of personal information.
  • If a message or email seems suspicious, report it to the respective organization.
  • Install antivirus software and set up automatic updates.