Scam variant dupes targets, saying their employer contravened the Employment Act
Authorities in Singapore are warning the public against scammers that are impersonating the Ministry of Manpower (MOM) to send malware-containing emails and websites.
The Singapore Police Force issued the warning on Tuesday, saying scammers are targeting employees so they can get unauthorised remote access to their devices.
"If these emails appear to be from a government agency, please seek further verification on their authenticity through the government agency's official communication channels," the police advised.
Source: Singapore Police Force
In the scam, scammers would send emails allegedly from MOM to their target victims, claiming that the receiver's company contravened the Employment Act.
The email then instructs them to click on an embedded link to review "rectification documents," which would direct them to a fake MOM webpage.
The webpage prompts the target to download the malware under the guise of a compressed file of "rectification documents."
Opening the compressed file will install the malware on the recipients' devices, granting the scammers unauthorised remote access to them, according to the police.
The police, in its advisory, further shared a screenshot of these malicious emails and websites and tagged them as fake.
Source: Singapore Police Force
Warning: Do not download unverified files
In April, the police said they detected and blocked at least 10 of these malicious websites, which were all disseminated to the recipients through their emails.
"The Police would like to remind members of the public not to click on any links that are received from unsolicited emails," it warned. "Do not download any files from unfamiliar or unverified sources."
MOM also said that its officers will never ask to transfer money over a phone call or email. They will also never ask Singaporeans to:
- Disclose bank log-in details
- Install mobile apps from unofficial app stores
- Transfer their call to the police
Authorities further urged Singaporeans to add the anti-scam application ScamShield on their phones.
It also advised them to check for scam signs with official sources and ensure that their computer's security software is updated regularly.
"Tell the authorities, family, and friends about scams. Report any fraudulent emails via the ScamShield app," the police said.
