“We’re with the police and the National Security Agency; your system is under threat”—these were the exact words a representative of one of the municipalities in the Žilina District heard during a phone call on Friday. That call cost the community more than 77,000 euros. This sophisticated cyberattack demonstrated that fraudsters have long been targeting not only unsuspecting citizens but, increasingly, government agencies as well.
How the attack on the municipal treasury unfolded
The incident occurred on Friday, September 18. As yet unidentified attackers contacted a representative of an unnamed municipality from several phone numbers at once. To create an impression of strict confidentiality and importance, they used the encrypted Signal app to communicate.
They posed as employees of the police and the National Security Authority (NBÚ). Under the pretext of an alleged crisis or the need to protect the system, they convinced the victim to grant them access to an official computer.
To gain control, they used the publicly available remote access program TeamViewer. As soon as the attackers infiltrated the municipal administration’s system, they gained unrestricted access to its finances. A series of unauthorized transfers were made from the local government’s bank accounts. The total amount of losses exceeded 77,000 euros.
The police have launched a criminal investigation
Forensic investigators are already actively working on this case. According to Zuzana Šefčiková, a spokeswoman for the Žilina Region Police, an investigator from the Žilina District Police Department has opened a criminal investigation on suspicion of fraud. The police have not yet disclosed the identities of the perpetrators but are searching for the entire group.
How to Protect Yourself from Such Threats
Fraud schemes like this occur regularly in Slovakia, and the perpetrators are using increasingly convincing tactics. If you manage finances, run a business, or work at an institution, it’s important to know the clear red lines that legitimate government agencies never cross:
- No calls from the police regarding bank accounts: Police officers never contact people by phone regarding alleged account activity and do not inquire about the amount of savings.
- No transfers to banks: The police never transfer citizens to commercial bank employees or invite them to join conference calls.
- No remote access for third parties: Institutions or individuals should never install programs such as TeamViewer at the instruction of strangers over the phone.
- Verify the information: If you have any doubts about the authenticity of a call, end the conversation immediately and contact the official hotline of the institution or bank.
