February in Estonian cyberspace: phishing and scams set the tone

February in Estonian cyberspace: phishing and scams set the tone
Photo: RIA

In February, 347 phishing pages and 349 scam websites, mainly designed to steal bank details and other user data, were discovered. Most of the damage was caused by investment fraud, with the biggest losses of recent months amounting to tens of thousands of euros.

In most cases, scammers promise the victims a very low-risk and high-yield investment on a cryptocurrency platform. People are often repeatedly asked to make contributions and shown how their investments keep growing. If a victim wants to withdraw a larger amount, this is no longer possible. Read more about investment fraud in this article in the itvaatlik.ee portal (in Estonian).

The Incident Response Department of RIA (CERT-EE) restricts access to scam and phishing sites, informs web hosts about them, and shares information with its international partners. Information about malicious websites can be sent to [email protected].

In terms of high-impact cyber incidents, the monthly overview of RIA highlights disruptions in the operation of Mobile-ID. In the afternoon of 3 February, the Mobile-ID service of Elisa was interrupted for an hour due to an error in the system change process and the Mobile-ID of Telia was down for about 45 minutes in the evening of 24 February.

The services of the IT and Development Centre of the Ministry of the Interior experienced disruptions twice. Around midday on 19 February, the emergency number 112 and the SOS2 emergency call handling system were disrupted, resulting in unusually long wait times for some emergency calls. In the morning of 20 February, the border control information system PIKO and the automatic border control gates were down for an hour. This was due to failed system changes and upgrades.