Beware of phishing emails pretending to be Tokyo Gas, with the subject line “[Tokyo Gas]Notice of billing fee confirmation” – INTERNET Watch

The Anti-Phishing Council has released information after receiving reports of phishing pretending to be Tokyo Gas. The phishing site you are being redirected to is still operational as of 9:00 a.m. on April 24th, so you must continue to be careful.

The following subjects have been confirmed for phishing emails: Other subjects may also be used.

• [Tokyo Gas]Notice of billing fee confirmation
• [myTOKYOGAS]Notice of billing fee confirmation

The text of the email has been confirmed to be as follows, which urges users to access the link to pay their unpaid gas bill.

[myTOKYOGAS]Notice of billing fee confirmation

Thank you for using myTOKYOGAS.

This month’s bill amount has been confirmed. Please complete the payment within the deadline. In the unlikely event that the payment deadline is passed, we will[stop]providing the service.

Payment deadline: 2024/04/24

Please log in from the URL below and make your payment.

(Excerpt from emergency information from the Phishing Countermeasures Council, original text)

The phishing site you are directed to pretends to be myTOKYOGAS, a service for TEPCO members, and you are prompted to enter your phone number. If you enter the information and continue the operation, the message “[Important Notice]You have not paid your overdue charges for 3 days and you are at risk of losing gas if more than 72 hours have passed.” will be displayed, along with information such as gas usage charges. be done. If you continue the operation, a screen for entering credit card information (card holder, card number, expiration date, security code) will be displayed, followed by an authentication code sent to the registered mobile phone number or email address. You will be prompted for input.

The following URLs of phishing sites have been confirmed. Please note that other domain names and URLs may be used.

URL in email

https://bit.ly/m-●●●●
https://psx●●●●.com/
https://gak●●●●.com/
http://okj●●●●.xyz/

Transfer destination URL

https://ujn●●●●.com/
https://ect●●●●.com/
https://gsa●●●●.com/
https://kyn●●●●.com/

The Anti-Phishing Council points out that “phishing sites are often created by copying the screens of genuine sites, and are extremely difficult to distinguish.” Furthermore, users are urged to always log in to services from official apps or web browser bookmarks, rather than using email or SMS links.

Tokyo Gas also issued a warning about malicious visits and phone calls. If you receive an SMS or email that seems suspicious, we urge you to delete it without opening it.