Thursday, January 28, 2021
Home News Warning on Bank Account hacking in Sri Lanka - SL CERT

Warning on Bank Account hacking in Sri Lanka – SL CERT

Sri Lanka CERT has issued a further update on the warning they issued for malicious One Time Password (OTP) SMS’s originating from local private numbers instead of respective authentication service providers.

Sri Lanka CERT statement 👇

Further Update: OTP’s sent via a Local Private Number

Threat Level


Further to our previous alert on the same subject matter there has been some misunderstanding relating to the impact due to this type of incidents, that have been reported to CERT. This update is to ensure that there is no misinterpretation or confusion with respect to the previous alert.

Sri Lanka CERT|CC has received numerous complaints from the general public expressing concern about receiving OTP messages from local (unknown) private numbers instead of from their usual trusted authentication service providers. Further it was reported that some of these SMS service providers have maliciously obtained user account details pretending to be their usual authentication service provider. As a result, some of these social media accounts have been compromised.


One Time Password (OTP) is a service that provides an extra layer of security. This is mostly used when accessing accounts and carrying out financial transactions etc. to identify the real user of the account. When a service provider sends an OTP to a customer, it comes as an SMS message and the displayed sender name of that OTP message will be the actual service provider. E.g. If you request an OTP from Google, sender of that OTP would be Google itself and you will receive a message from Google.

If you receive your OTP from a local private number, instead of from your usual service provider’s name it means that the message has come through a third-party SMS provider. They normally change its content slightly except the OTP code and send it to the user through a private number.  Please refer below images for examples, where there are deliberate spelling mistakes made and the word “OTP” is not used – in order to bypass detection by legitimate service providers.

There have been several reports about malicious third party SMS Gateway service providers who have attempted to obtain account details (user names, password etc.) by having further communication with customers pretending to be the legitimate service provider by building trust using the OTP message. Sri Lanka CERT has received numerous complaints of such compromised accounts, after investigation it was discovered that account details have been provided to malicious third party SMS service providers after receiving the OTP.


  • Potential risk of your online accounts such as social media, emails, online banking, etc. being compromised, in the event that you mistakenly disclose your account credentials or personal details to third party SMS service providers who pretend to be your trusted service provider.

Solution/ Workarounds

  • Do not disclose any of your account credentials or personal details to the third-party SMS providers or anyone else by any means (Calls, SMS, Emails, etc.)
  • Frequently change your passwords and setup proper account recovery options.


The information provided herein is on “as is” basis, without warranty of any kind.

Source : Newswire.lk

Leave a Reply

- Advertisment -

Most Popular

“நான் ஒரு ஆரி ஆதரவாளன் இல்ல ஆனா”… விஜய் டிவி பிரபலம் வெளியிட்ட பதிவு பற்றிய பரபரப்பு தகவல்.

விஐய் தொலைக்காட்சி பிக்பாஸ் நிகழ்ச்சி பல திருப்பங்களுடன் விறுவிறுப்பாக சுவார்சியமாகவும் நடந்து கொண்டிருக்கிறது. இந்நிலையில் கடந்த வாரங்களில் Freeze டாஸ்க் நடைபெற்றது....

Bigg Boss – 4 காதல் மன்னன் பாலாஜி முருகதாசுக்கு ரெட் காட் கொடுக்கப்பட்டு வெளியேற்றப்படுவாரா???

விஜய் டிவியில் ஒளிபரப்பாகி கொண்டிருக்கும் பிக்பாஸ்4 நிகழ்ச்சியில் அனுதினமும் புதுப்புது திருப்பங்கள் அரங்கேறுவது வழக்கம். அந்த வகையில் இந்த வாரம் பாலாஜி முருகதாசுக்கு...

Samsung Group titan Lee Kun-hee dies aged 78

Lee Kun-hee, the chairman of South Korea's largest conglomerate, Samsung Group, has died aged 78.

குழந்தைகளுக்கு ஒவ்வாமை நோய் ஏற்படாமல் இருக்க எதனை எப்போது செய்ய வேண்டும் தெரியுமா??????

முட்டையை உட்கொள்வதால் இது புரதம் மற்றும் சில ஊட்டச்சத்தை உடலுக்கு வழங்குகின்றது. இவற்றை பெற்றோர்கள் குழந்தைகள் உணவை மெல்லுவதற்கு எளிதாக இருப்பதால் , குழந்தைகள் முதல் பெரியவர்கள் வரை...

Recent Comments