{
  "name": "Scammers target UK senior citizens with Winter Fuel Payment texts",
  "slug": "scammers-target-uk-senior-citizens-with-winter-fuel-payment-texts",
  "description": "Opportunistic scammers are exploiting the UK's recent changes to the Winter Fuel Payments program by targeting senior British residents with fraudulent text messages. These messages claim to offer 'winter heating allowance' and 'cost of living support', directing recipients to deceptive websites that mimic official GOV.UK pages. The phishing sites aim to collect personal and financial information from unsuspecting victims. The scam is particularly concerning given the government's controversial decision to reduce winter fuel payments for millions of pensioners. The fraudulent campaign is designed to work primarily on mobile devices, presenting a fake 'domain for sale' page when accessed from computers. Authorities advise against clicking on suspicious links and recommend reporting such scams to the appropriate agencies.",
  "published": "2024-11-09T22:59:23+00:00",
  "created_at": "2024-11-09T22:59:23+00:00",
  "modified_at": "2024-11-11T08:33:49+00:00",
  "created_at_opencti": "2024-11-09T22:59:23+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-11-09",
    "gov.uk impersonation",
    "mobile-targeted",
    "phishing",
    "senior citizens",
    "text scam",
    "uk",
    "winter fuel payment"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "winterpaymenzs.top"
      },
      {
        "id": "",
        "name": "winterpaymenzq.top"
      },
      {
        "id": "",
        "name": "winterpaymenzl.top"
      },
      {
        "id": "",
        "name": "winterpaymenzk.top"
      },
      {
        "id": "",
        "name": "winterpaymenzj.top"
      },
      {
        "id": "",
        "name": "winterpaymenzh.top"
      },
      {
        "id": "",
        "name": "winterpaymenzg.top"
      },
      {
        "id": "",
        "name": "winterpaymenzf.top"
      },
      {
        "id": "",
        "name": "winterpaymenzd.top"
      },
      {
        "id": "",
        "name": "winterpaymenza.top"
      },
      {
        "id": "",
        "name": "winterpaymenvy.top"
      },
      {
        "id": "",
        "name": "winterpaymenvw.top"
      },
      {
        "id": "",
        "name": "winterpaymenvu.top"
      },
      {
        "id": "",
        "name": "winterpaymenvt.top"
      },
      {
        "id": "",
        "name": "winterpaymenvr.top"
      },
      {
        "id": "",
        "name": "winterpaymenvq.top"
      },
      {
        "id": "",
        "name": "winterpaymenvp.top"
      },
      {
        "id": "",
        "name": "winterpaymenvo.top"
      },
      {
        "id": "",
        "name": "winterpaymenvky.top"
      },
      {
        "id": "",
        "name": "winterpaymenvkw.top"
      },
      {
        "id": "",
        "name": "winterpaymenvku.top"
      },
      {
        "id": "",
        "name": "winterpaymenvkt.top"
      },
      {
        "id": "",
        "name": "winterpaymenvkq.top"
      },
      {
        "id": "",
        "name": "winterpaymenvkr.top"
      },
      {
        "id": "",
        "name": "winterpaymenvko.top"
      },
      {
        "id": "",
        "name": "winterpaymenvkp.top"
      },
      {
        "id": "",
        "name": "winterpaymenvki.top"
      },
      {
        "id": "",
        "name": "winterpaymenvke.top"
      },
      {
        "id": "",
        "name": "winterpaymenvi.top"
      },
      {
        "id": "",
        "name": "winterpaymenve.top"
      },
      {
        "id": "",
        "name": "winterpaymenuy.top"
      },
      {
        "id": "",
        "name": "winterpaymenuw.top"
      },
      {
        "id": "",
        "name": "winterpaymenuu.top"
      },
      {
        "id": "",
        "name": "winterpaymenur.top"
      },
      {
        "id": "",
        "name": "winterpaymenut.top"
      },
      {
        "id": "",
        "name": "winterpaymenuq.top"
      },
      {
        "id": "",
        "name": "winterpaymenuo.top"
      },
      {
        "id": "",
        "name": "winterpaymenui.top"
      },
      {
        "id": "",
        "name": "winterpaymenuh.top"
      },
      {
        "id": "",
        "name": "winterpaymenue.top"
      },
      {
        "id": "",
        "name": "winterpaymentzzz.top"
      },
      {
        "id": "",
        "name": "winterpaymentzxt.top"
      },
      {
        "id": "",
        "name": "winterpaymentzxr.top"
      },
      {
        "id": "",
        "name": "winterpaymentzt.top"
      },
      {
        "id": "",
        "name": "winterpaymentzsvm.top"
      },
      {
        "id": "",
        "name": "winterpaymentzr.top"
      },
      {
        "id": "",
        "name": "winterpaymentzqo.top"
      },
      {
        "id": "",
        "name": "winterpaymentzrx.top"
      },
      {
        "id": "",
        "name": "winterpaymentzpm.top"
      },
      {
        "id": "",
        "name": "winterpaymentzk.top"
      },
      {
        "id": "",
        "name": "winterpaymentzie.top"
      },
      {
        "id": "",
        "name": "winterpaymentzi.top"
      },
      {
        "id": "",
        "name": "winterpaymentza.top"
      },
      {
        "id": "",
        "name": "winterpaymentyzj.top"
      },
      {
        "id": "",
        "name": "winterpaymentyvn.top"
      },
      {
        "id": "",
        "name": "winterpaymentyv.top"
      },
      {
        "id": "",
        "name": "winterpaymentys.top"
      },
      {
        "id": "",
        "name": "winterpaymentynz.top"
      },
      {
        "id": "",
        "name": "winterpaymentyn.top"
      },
      {
        "id": "",
        "name": "winterpaymentyk.top"
      },
      {
        "id": "",
        "name": "winterpaymentyg.top"
      },
      {
        "id": "",
        "name": "winterpaymentye.top"
      },
      {
        "id": "",
        "name": "winterpaymentycl.top"
      },
      {
        "id": "",
        "name": "winterpaymentyc.top"
      },
      {
        "id": "",
        "name": "winterpaymentyaxf.top"
      },
      {
        "id": "",
        "name": "winterpaymentya.top"
      },
      {
        "id": "",
        "name": "winterpaymentxzx.top"
      },
      {
        "id": "",
        "name": "winterpaymentxx.top"
      },
      {
        "id": "",
        "name": "winterpaymentxy.top"
      },
      {
        "id": "",
        "name": "winterpaymentxv.top"
      },
      {
        "id": "",
        "name": "winterpaymentxs.top"
      },
      {
        "id": "",
        "name": "winterpaymentxt.top"
      },
      {
        "id": "",
        "name": "winterpaymentxr.top"
      },
      {
        "id": "",
        "name": "winterpaymentxqv.top"
      },
      {
        "id": "",
        "name": "winterpaymentxpc.top"
      },
      {
        "id": "",
        "name": "winterpaymentxp.top"
      },
      {
        "id": "",
        "name": "winterpaymentxowq.top"
      },
      {
        "id": "",
        "name": "winterpaymentxns.top"
      },
      {
        "id": "",
        "name": "winterpaymentxn.top"
      },
      {
        "id": "",
        "name": "winterpaymentxmx.top"
      },
      {
        "id": "",
        "name": "winterpaymentxiv.top"
      },
      {
        "id": "",
        "name": "winterpaymentxc.top"
      },
      {
        "id": "",
        "name": "winterpaymentxig.top"
      },
      {
        "id": "",
        "name": "winterpaymentxb.top"
      },
      {
        "id": "",
        "name": "winterpaymentxar.top"
      },
      {
        "id": "",
        "name": "winterpaymentwz.top"
      },
      {
        "id": "",
        "name": "winterpaymentws.top"
      },
      {
        "id": "",
        "name": "winterpaymentwn.top"
      },
      {
        "id": "",
        "name": "winterpaymentwl.top"
      },
      {
        "id": "",
        "name": "winterpaymentwky.top"
      },
      {
        "id": "",
        "name": "winterpaymentwkt.top"
      },
      {
        "id": "",
        "name": "winterpaymentwkw.top"
      },
      {
        "id": "",
        "name": "winterpaymentwku.top"
      },
      {
        "id": "",
        "name": "winterpaymentwkr.top"
      },
      {
        "id": "",
        "name": "winterpaymentwkp.top"
      },
      {
        "id": "",
        "name": "winterpaymentwkq.top"
      },
      {
        "id": "",
        "name": "winterpaymentwko.top"
      },
      {
        "id": "",
        "name": "winterpaymentwki.top"
      },
      {
        "id": "",
        "name": "winterpaymentwke.top"
      },
      {
        "id": "",
        "name": "winterpaymentwk.top"
      },
      {
        "id": "",
        "name": "winterpaymentwh.top"
      },
      {
        "id": "",
        "name": "winterpaymentwf.top"
      },
      {
        "id": "",
        "name": "winterpaymentwau.top"
      },
      {
        "id": "",
        "name": "winterpaymentwa.top"
      },
      {
        "id": "",
        "name": "winterpaymentvzy.top"
      },
      {
        "id": "",
        "name": "winterpaymentvyf.top"
      },
      {
        "id": "",
        "name": "winterpaymentvy.top"
      },
      {
        "id": "",
        "name": "winterpaymentvv.top"
      },
      {
        "id": "",
        "name": "winterpaymentvuo.top"
      },
      {
        "id": "",
        "name": "winterpaymentvs.top"
      },
      {
        "id": "",
        "name": "winterpaymentvr.top"
      },
      {
        "id": "",
        "name": "winterpaymentvqx.top"
      },
      {
        "id": "",
        "name": "winterpaymentvqj.top"
      },
      {
        "id": "",
        "name": "winterpaymentvns.top"
      },
      {
        "id": "",
        "name": "winterpaymentvn.top"
      },
      {
        "id": "",
        "name": "winterpaymentvmx.top"
      },
      {
        "id": "",
        "name": "winterpaymentvmt.top"
      },
      {
        "id": "",
        "name": "winterpaymentvlj.top"
      },
      {
        "id": "",
        "name": "winterpaymentvl.top"
      },
      {
        "id": "",
        "name": "winterpaymentvi.top"
      },
      {
        "id": "",
        "name": "winterpaymentvhc.top"
      },
      {
        "id": "",
        "name": "winterpaymentuz.top"
      },
      {
        "id": "",
        "name": "winterpaymentuxj.top"
      },
      {
        "id": "",
        "name": "winterpaymentuvx.top"
      },
      {
        "id": "",
        "name": "winterpaymentuvk.top"
      },
      {
        "id": "",
        "name": "winterpaymentus.top"
      },
      {
        "id": "",
        "name": "winterpaymentury.top"
      },
      {
        "id": "",
        "name": "winterpaymentupt.top"
      },
      {
        "id": "",
        "name": "winterpaymentunn.top"
      },
      {
        "id": "",
        "name": "winterpaymentunl.top"
      },
      {
        "id": "",
        "name": "winterpaymentun.top"
      },
      {
        "id": "",
        "name": "winterpaymentumj.top"
      },
      {
        "id": "",
        "name": "winterpaymentum.top"
      },
      {
        "id": "",
        "name": "winterpaymentuly.top"
      },
      {
        "id": "",
        "name": "winterpaymentuh.top"
      },
      {
        "id": "",
        "name": "winterpaymentug.top"
      },
      {
        "id": "",
        "name": "winterpaymentuew.top"
      },
      {
        "id": "",
        "name": "winterpaymentudx.top"
      },
      {
        "id": "",
        "name": "winterpaymentudp.top"
      },
      {
        "id": "",
        "name": "winterpaymentua.top"
      },
      {
        "id": "",
        "name": "winterpaymenttxb.top"
      },
      {
        "id": "",
        "name": "winterpaymenttvv.top"
      },
      {
        "id": "",
        "name": "winterpaymenttv.top"
      },
      {
        "id": "",
        "name": "winterpaymenttu.top"
      },
      {
        "id": "",
        "name": "winterpaymenttsg.top"
      },
      {
        "id": "",
        "name": "winterpaymenttp.top"
      },
      {
        "id": "",
        "name": "winterpaymentto.top"
      },
      {
        "id": "",
        "name": "winterpaymenttnc.top"
      },
      {
        "id": "",
        "name": "winterpaymenttl.top"
      },
      {
        "id": "",
        "name": "winterpaymenttk.top"
      },
      {
        "id": "",
        "name": "winterpaymenttg.top"
      },
      {
        "id": "",
        "name": "winterpaymenttf.top"
      },
      {
        "id": "",
        "name": "winterpaymenttdw.top"
      },
      {
        "id": "",
        "name": "winterpaymenttd.top"
      },
      {
        "id": "",
        "name": "winterpaymentsyv.top"
      },
      {
        "id": "",
        "name": "winterpaymentsx.top"
      },
      {
        "id": "",
        "name": "winterpaymentsw.top"
      },
      {
        "id": "",
        "name": "winterpaymentsvk.top"
      },
      {
        "id": "",
        "name": "winterpaymentsv.top"
      },
      {
        "id": "",
        "name": "winterpaymentsu.top"
      },
      {
        "id": "",
        "name": "winterpaymentso.top"
      },
      {
        "id": "",
        "name": "winterpaymentsno.top"
      },
      {
        "id": "",
        "name": "winterpaymentsmu.top"
      },
      {
        "id": "",
        "name": "winterpaymentslx.top"
      },
      {
        "id": "",
        "name": "winterpaymentsl.top"
      },
      {
        "id": "",
        "name": "winterpaymentsh.top"
      },
      {
        "id": "",
        "name": "winterpaymentsgn.top"
      },
      {
        "id": "",
        "name": "winterpaymentsd.top"
      },
      {
        "id": "",
        "name": "winterpaymentrxr.top"
      },
      {
        "id": "",
        "name": "winterpaymentrww.top"
      },
      {
        "id": "",
        "name": "winterpaymentrv.top"
      },
      {
        "id": "",
        "name": "winterpaymentruj.top"
      },
      {
        "id": "",
        "name": "winterpaymentru.top"
      },
      {
        "id": "",
        "name": "winterpaymentrtl.top"
      },
      {
        "id": "",
        "name": "winterpaymentrt.top"
      },
      {
        "id": "",
        "name": "winterpaymentrlj.top"
      },
      {
        "id": "",
        "name": "winterpaymentrl.top"
      },
      {
        "id": "",
        "name": "winterpaymentrkn.top"
      },
      {
        "id": "",
        "name": "winterpaymentrh.top"
      },
      {
        "id": "",
        "name": "winterpaymentrej.top"
      },
      {
        "id": "",
        "name": "winterpaymentrd.top"
      },
      {
        "id": "",
        "name": "winterpaymentrdq.top"
      },
      {
        "id": "",
        "name": "winterpaymentrc.top"
      },
      {
        "id": "",
        "name": "winterpaymentra.top"
      },
      {
        "id": "",
        "name": "winterpaymentqzz.top"
      },
      {
        "id": "",
        "name": "winterpaymentqx.top"
      },
      {
        "id": "",
        "name": "winterpaymentqw.top"
      },
      {
        "id": "",
        "name": "winterpaymentqr.top"
      },
      {
        "id": "",
        "name": "winterpaymentqpj.top"
      },
      {
        "id": "",
        "name": "winterpaymentqml.top"
      },
      {
        "id": "",
        "name": "winterpaymentqn.top"
      },
      {
        "id": "",
        "name": "winterpaymentqki.top"
      },
      {
        "id": "",
        "name": "winterpaymentqj.top"
      },
      {
        "id": "",
        "name": "winterpaymentqk.top"
      },
      {
        "id": "",
        "name": "winterpaymentqfi.top"
      },
      {
        "id": "",
        "name": "winterpaymentqf.top"
      },
      {
        "id": "",
        "name": "winterpaymentqac.top"
      },
      {
        "id": "",
        "name": "winterpaymentqe.top"
      },
      {
        "id": "",
        "name": "winterpaymentpy.top"
      },
      {
        "id": "",
        "name": "winterpaymentpyx.top"
      }
    ],
    "attack_patterns": [
      {
        "id": "5c67e5d2-bc85-4ce0-822d-f2f5d3b0ae4e",
        "name": "T1185"
      },
      {
        "id": "16e4fc82-7c0b-4d1a-b784-b804b4df26dc",
        "name": "T1204.001"
      },
      {
        "id": "52b92395-d3d3-4e05-976a-0fccccfce8d2",
        "name": "T1566.002"
      },
      {
        "id": "196f2a64-c55b-47a6-8e38-beb76ba700b6",
        "name": "T1204.002"
      },
      {
        "id": "804630c7-dda3-49df-9ac4-70bd1ad83e06",
        "name": "T1192"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "United Kingdom of Great Britain and Northern Ireland"
      }
    ]
  },
  "external_refs": [
    "https://www.bleepingcomputer.com/news/security/scammers-target-uk-senior-citizens-with-winter-fuel-payment-texts/",
    "https://otx.alienvault.com/pulse/672ff75b9371d3c62bc82f40"
  ]
}