Optus victims issued warning over vile text and email scams

Victims of the Optus data breach have been alerted to a handful of new scams being attempted by opportunistic hackers.

Australians have been warned against a handful of new scams being attempted on victims of the major Optus data breach that compromised the personal information of millions.

Scammers taking advantage of the biggest cyber breach in recent history have set about trying to fleece unsuspecting Aussies “in any way that they can”, Scamwatch warned this week.

Among the most prominent ways were text messages and emails from scammers posing as Optus, requesting that targets click their suspicious links or transfer money into a random bank account.

Scamwatch, which is run by government agency the Australian Competition and Consumer Commission (ACCC), said anyone who received a text claiming Optus was issuing new SIM cards should delete it immediately.

The text claimed to be from Optus security and told recipients the telco would be issuing new SIM cards because of the data breach which would “not affect your services”.

Stream more tech news live & on demand with Flash. 25+ news channels in 1 place. New to Flash? Try 1 month free. Offer ends 31 October, 2022 >

Optus is not issuing new SIM cards.

These texts should be deleted immediately.

It then directed recipients to a dodgy link to “book delivery”.

Another message being distributed by scammers was one threatening to release personal information if $2000 isn’t transferred into a bank account.

“Optus has not responded to our demand of paying the $1 million ransom as such your information will be sold and used for fraudulent activity within two days or until a payment of $2000 is made then the confidential information will be erased off our systems,” the message read.

“Send me a screenshot of the receipt once it’s complete.”

There is no risk of losing your email if you’re with Optus.

Recipients are urged not to click any links in these emails.

Another scammer was targeting people via email and requesting they click a link to update their direct debit information because of an “issue” with their monthly payment.

In another email, recipients were told that because their identity had been compromised they were “eligible for reimbursements of false acquisitions, compensation for potential impact on your credit and any additional claims you may make”.

A third email came from the address “optusnet.com.au” and told recipients their password was about to expire and needed to be reset otherwise they would lose access to their email.

A common trick is asking victims to update their payment details.

The subject tells receivers: “Your email account will be temporarily closed.”

Scamwatch said scammers were using the Optus data breach to execute remote access scams, which involve getting victims to download a piece of software to their phone or computer that hackers can use to access them.

“Scammers will claim to be from an organisation and provide a reason they need access to your device, including reasons related to the Optus data breach,” the organisation said.

Optus breach victims are not eligible for reimbursement and should not follow directives in these emails.

“Scammers may claim they need access to your device to secure it, fix it, investigate what the problem is, or even catch hackers on the device. Remote access software includes programs like TeamViewer QuickSupport, AnyDesk, and Zozo Assist.”

Those affected by the Optus breach have been told to inform their banks or credit providers of their situation, apply for a credit ban so their name can’t be used to secure a loan, and contact their superannuation fund.

In addition it has been recommended that victims get a replacement drivers licence, apply for a passport renewal, get a new Medicare card and inform telco and internet providers.