Feb 28 • 06:41 UTC 🇶🇦 Qatar Al Jazeera

In Ramadan.. How to Protect Yourself from Fake 'Charity Donation' Links?

The article discusses the increase in social engineering attacks during Ramadan, specifically targeting individuals through fake charity links that exploit religious sentiments.

As Ramadan approaches, the digital space sees an uptick in social engineering attacks, where scammers are not only targeting technical systems but also the 'human gap' by exploiting religious emotions. Cybercriminals craft sophisticated phishing campaigns that utilize artificial intelligence algorithms to generate seemingly credible content, tricking individuals into unknowingly accessing fraudulent sites. This behavior is particularly targeted during the holy month when charity donations rise, making it an opportune moment for malpractices.

The article delves into the technical mechanisms behind these fake donation links, which include several deceptive tactics to mislead users. One major tactic is domain spoofing, where attackers register domains that closely resemble official sites, changing just a letter to create confusion (e.g., changing ehsan.sa to ehssan.sa). Additionally, criminals employ URL shorteners such as bit.ly or cutt.ly, obscuring the true destination of the link to prevent immediate detection by security measures in messaging apps. The use of malicious software injection is also highlighted, where links not only solicit donations but also load cookies to hijack browser sessions and gain access to open banking wallets.

With the increase of such scams during Ramadan, the article emphasizes the importance of raising awareness among individuals regarding these prevalent threats. It calls for vigilance, encouraging users to validate links and sources before making any donations, thereby fostering a more secure digital environment for charitable activities during the holy month.

📡 Similar Coverage