We have examined this scheme and found that it is not entirely new, but has become more sophisticated. If previously scammers wrote in private messages, now they create two-person chats or even group conversations.
In such chats, a fake "boss" still appears, who intimidates the subordinate, referring to a non-existent curator from the KGB. However, now the victim is added to a chat where there may be accounts posing as colleagues, and sometimes even real employees who are unaware of the substitution. This creates an illusion of the authenticity of what is happening.
How does this very new scheme work?
In the chat, the fake "manager" gives an urgent instruction, for example, to register in a "corporate" bot or confirm access to some resource. The victim receives an SMS or push notification with a code.
Fake "colleagues" actively send their "codes" to the chat, and the "boss" praises them for their promptness. Yielding to pressure and haste, the victim loses vigilance and shares their code publicly, falling victim to scammers.
The moral: Always verify the authenticity of any requests, especially if they require urgent action or the transfer of confidential information.
Never share codes from SMS or push notifications, even if the situation seems plausible. Vigilance is your best defence against scammers.