According to information on Sekurak.pl on May 5, 2020 CERT Polska published a warning about a new scam action. This time we were dealing with a fake version of very popular portal called Librus, which is used in Polish schools.
About Librus website
Librus Synergia offers solutions for schools such as: electronic journal, timetable, assignments, absences, etc. Due to the COVID-19 pandemic, this portal has gained a lot of popularity in last weeks. Recently, the website has recorded almost 700 million hits and is ranked #12 in Poland in terms of the most visited websites.
Every letter matters
The proper portal is available at: https://portallibrus.pl/ (and several others). Meanwhile, under a deceptive-looking domain: http://portalibrus[.]pl/ (one “l” less), there is a website that steals logins and passwords.
On May 6, 2020 we checked that portalibrus.p is no longer accessible. The domain currently has a status of “investigation in progress [REGISTERED, with clientHold/serverHold status]”). However, all users of the Librus portal should review their login history to check whether they have not accidentally logged on to the scam website.
Be careful online
Remember that fake versions of popular websites (such as banks, social networking sites, etc.) is a common method of stealing user data – it is also known as phishing. Remaining vigilant is the easiest and most effective technique. It is always a good idea to check whether the website has no “typos” in its address, holds a valid certificate and its content does not raise any concerns. Better to take the extra minute to verify than to lose valuable data.
—
Does your business need cybersecurity solutions? Contact us!
