Overview

• Sparkasse reports mass SMS messages falsely urging an urgent S‑pushTAN app update that direct users to convincing fake sites to steal logins and personal data.
• The Sparkassen Computer Emergency Team warns that attackers may follow up with spoofed phone calls to trick customers into approving devices or entering TANs.
• Volksbank and Raiffeisenbank customers are receiving emails citing a supposed security check that demand identity confirmation via a link under threat of account suspension.
• Consorsbank is being impersonated in emails that claim a new European law invalidated customers’ mobile numbers and push recipients to click a fraudulent link.
• Verbraucherzentrale, the BSI, and banks advise ignoring unsolicited links, checking messages only through official apps or websites, and contacting the bank at once to block online banking if credentials were entered.