The key points are temporarily unavailable. You can still read the full Story below.
Main Points
A technical analysis released by the cybersecurity firm ESET on the WeLiveSecurity portal on 23 October 2026 identified a new digital fraud scheme operating in Mexico. The scam uses mass‑sent emails that appear to contain legitimate electronic tax receipts (comprobantes fiscales) in PDF format. When recipients download or open the attachment, a trojan downloader installs malware that extracts banking credentials and allows unauthorized transfers from users’ online banking accounts. The National Commission for the Protection and Defense of Users of Financial Services (Condusef) and the Mexican Bank Association (ABM) issued preventive guidance following the report. According to Condusef, phishing and social‑engineering attacks accounted for 20.53 % of cyber threats in the first half of 2026, while downloaders represented 19.99 % of reported incidents. The fraud typically begins with emails that claim to attach invoices, billing notices for unrendered services, or duplicate charges. To gain the victim’s trust, attackers often include personal data that appears authentic. Opening the attachment triggers the trojan, which then remotely stores itself in the device’s memory and harvests passwords and banking credentials. Condusef and ABM advise users who receive suspicious emails to avoid clicking links or opening attachments. Instead, they should verify the authenticity of any purported tax receipt directly on the official Servicio de Administración Tributaria (SAT) website: 1. Visit sat.gob.mx and navigate to the electronic invoice section. 2. Select “Servicios de factura” and click “Consulta, cancela y recupera tus facturas.” 3. Log in with the stored password or e‑firma and click “Consultar Facturas Recibidas.” 4. Search for the receipt by date or fiscal folio to confirm its presence in the official database. If the receipt does not appear, the email is likely fraudulent. Users can report the sender’s address to the SAT at denuncias@sat.gob.mx so that the domain can be added to the list of known fake addresses. Both Condusef and ABM also recommend keeping antivirus software active on computers and mobile devices, enabling real‑time banking notifications to detect unauthorized transactions, and refraining from sharing passwords or PINs under any circumstances. Article source: El Imparcial | Image credit: El Imparcial
A technical analysis released by the cybersecurity firm ESET on the WeLiveSecurity portal on 23 October 2026 identified a new digital fraud scheme operating in Mexico. The scam uses mass‑sent emails that appear to contain legitimate electronic tax receipts (comprobantes fiscales) in PDF format. When recipients download or open the attachment, a trojan downloader installs malware that extracts banking credentials and allows unauthorized transfers from users’ online banking accounts. The National Commission for the Protection and Defense of Users of Financial Services (Condusef) and the Mexican Bank Association (ABM) issued preventive guidance following the report. According to Condusef, phishing and social‑engineering attacks accounted for 20.53 % of cyber threats in the first half of 2026, while downloaders represented 19.99 % of reported incidents. The fraud typically begins with emails that claim to attach invoices, billing notices for unrendered services, or duplicate charges. To gain the victim’s trust, attackers often include personal data that appears authentic. Opening the attachment triggers the trojan, which then remotely stores itself in the device’s memory and harvests passwords and banking credentials. Condusef and ABM advise users who receive suspicious emails to avoid clicking links or opening attachments. Instead, they should verify the authenticity of any purported tax receipt directly on the official Servicio de Administración Tributaria (SAT) website: 1. Visit sat.gob.mx and navigate to the electronic invoice section. 2. Select “Servicios de factura” and click “Consulta, cancela y recupera tus facturas.” 3. Log in with the stored password or e‑firma and click “Consultar Facturas Recibidas.” 4. Search for the receipt by date or fiscal folio to confirm its presence in the official database. If the receipt does not appear, the email is likely fraudulent. Users can report the sender’s address to the SAT at denuncias@sat.gob.mx so that the domain can be added to the list of known fake addresses. Both Condusef and ABM also recommend keeping antivirus software active on computers and mobile devices, enabling real‑time banking notifications to detect unauthorized transactions, and refraining from sharing passwords or PINs under any circumstances.
News Desk is the editorial publishing account for Tringlobe Media News, covering breaking news, public affairs, entertainment, community developments and regional stories across Trinidad and Tobago, the Caribbean and internationally.
