PROTECT YOURLESF

⚠️ Warning

A large-scale phishing and vishing campaign is currently taking place in Slovenia, in which attackers falsely present themselves as the company Halcom and primarily target corporate e-banking users. They use fake emails (phishing), phone calls (vishing), and counterfeit login pages to obtain confidential information or gain remote access to the victim’s computer. The attackers misuse the company’s name as well as the graphic design and appearance of user interfaces to deceive users.

At Halcom, we emphasize that we have no connection with these attacks and continually urge users to remain cautious. Neither Halcom nor the banks ever request PINs or other confidential information, activation codes, or the installation of remote-access software from their users.

In cooperation with the police, banks, and relevant authorities, Halcom has introduced a range of measures, including requests to block malicious domains, public notifications, and technical monitoring to enable faster detection and blocking of malicious activities.

We advise e-banking users to exercise additional caution: do not open links in messages that ask you to urgently update, enter data, or provide activation codes. Never install remote-access software based on instructions from unknown individuals, and always use only the official links of Halcom and the banks.

More details about the attacks and recommendations can be found at the link below:
Click here

MALICIOUS DOMAINS LIST

The current list of domains that attackers have already used. The list is regularly updated.

hal-cert.com hal-cert.net hal-dcs.com
hal-ecert.com nexus-posta.com hal-varnost.com
hal-varstvo.com halcert.com halcom-eu.com
halcom-finance.com halcom-finservis.com halcom-id.com
halcom-kapital.com halcom-mail.com halcom-pay.com
halcom-placila.com halcom-s.com halcom-si.com
halcom-podpora.com halcom-v.com halcom-varnost.com
halcom24ur.com halcomauth.com halcomv.com
hauth-si.com ispfinancni.com nexus-hal.com
halcom-finservis.com isp-auth.com hal-inbox.net
hal-auth.net hal-mail.net oauth-1.com
halc-auth.com halc-m.com halco-3.com
halcm.com halcm1.com halcm2.com
halco-4.com
hal-ca.com hal-si.com
hal-slo.com hal-sl.com halkap.com
hal-kap.com halkonta.com halc-plus.com
halplus.net haldp.com hlcauth.com
hal-e.net ha-dp.net havcert.com
halsig.net halcomsecure.com halcomsecured.com
halcomsecuredv.com halcomcdn.com halcomdns.com
halcomssl.com halcomdoo.com hzascita.com
hvarnost.com
hvarstvo.com hvarnost24.com
finzascita.com varnaomrezja.com halcom-nadzor.com 
cert-zascita.com cert-dora.com ha-cert.com
prostik-os.com halcom-ibs.com halcom-inc.com
haldb.com haldbs.net