In recent days, several users have reported receiving a fraudulent SMS that apparently comes from the State Meteorological Agency (AEMET), in which they warn of an alleged "severe storm" and request to download an application through a link included in the message. This SMS is completely fake and the agency has issued a notice to alert citizens of this new threat.
As reported by AEMET itself through its social media accounts, They never send alerts via SMS, so any such communication or notice should be considered fraudulent. This scam, known as smishing, aims to steal personal or financial data from people who download the application or click on the link.
The fake message notifies the arrival of a supposed storm in the user's region and, taking advantage of people's fear, invites them to download an application to "stay safe." This application, however, is nothing more than a malware, a type of malware that can compromise the security of your device and steal your personal information.
How the scam works
The deception is simple but effective. Users receive a text message that appears to come from AEMET, warning of a severe storm and offering a link to download an app that, in theory, would offer more weather information. The SMS also often contains spelling mistakes, a detail that should immediately raise suspicions.
If the user clicks on the link and downloads the application, their device will most likely be infected with a malware. Trojan, a type of malware that can steal personal data, such as passwords, banking information or even access contacts and files stored on your mobile phone.
One of the dangers of this type of attack is that The SMS appears with the name “AEMET” as the sender, which creates false confidence in the recipient and makes it easier for them to fall into the trap.
Tips to avoid falling for this scam
Unfortunately, smishing scams are becoming more and more common, so it's essential to take some basic precautions to avoid falling for them. Here are some helpful tips:
- Never open a link in a message that you were not expecting to receive, especially if it comes from an official entity.
- Check the URL of the link before clicking. If it does not match the official website of the agency or organization, do not open it.
- Download apps only from official stores (App Store for Apple devices or Google Play on Android). Apps verified in these stores are safe.
- If you receive a suspicious SMS, contact directly with the organization from its official website or social networks to verify the information.
Also, remember that AEMET does not use SMS to communicate weather alerts nor will it ask you to download applications through any link. If you need the Official AEMET app, you can find it in the official iOS and Android app stores.
What to do if you have clicked on the link
If you have fallen for the scam and downloaded the app or provided personal data to cybercriminals, it is important to act quickly:
- Report the incident to your bank if you have provided banking information on the fraudulent page.
- In addition, it is recommended report the case to the police or the Civil Guard as soon as possible. Provide all the evidence you have, such as screenshots or the number from which the SMS was sent.
- Finally, if you downloaded the app, perform an antivirus scan on your device and, if necessary, reset your phone to its factory settings to remove any traces of the Trojan.
The importance of being alert to scams
This wave of fake SMS messages using the name of AEMET to impersonate the agency has increased, taking advantage of the fear generated by extreme weather events such as the recent DANAS. Cybercriminals play on fear and anxiety of citizens to make them lower their guard and react impulsively to a supposed danger.
Authorities have already warned that It's not the only scam of this type that is circulating. Frauds via SMS, emails or even identity theft on social networks are becoming more and more frequent. Being alert to suspicious details in messages and always checking that the source is reliable can avoid many problems.
Ultimately, the most important thing is that if you receive a message like this, act with caution: Don't open strange links, Don't download apps from unofficial sites and, above all, keep informed through official sources such as the AEMET website (aemet.es) or their social media profiles.