KUALA LUMPUR (Sept 30): Petroliam Nasional Bhd (Petronas) has cautioned the public not to interact with malicious deceptive sites purportedly selling the company’s merchandise.

In a notice, Petronas said it is made aware of the sites— pt-gift.store, petronas-gift.store and myworkshop.store — which hosts Android malware.

Petronas said these sites would offer bogus deals such as an “All-Inclusive Car Service Package” whereby victims would have to click on a booking link that downloads a malicious app into their mobile devices for them to receive the deals.

By installing the app and making a payment for their purchases, the scammer will capture and steal the victims’ online credentials, credit card information, as well as take over SMS functionality for one-time PINS (OTPs), it said.  

Victims would then be notified of unauthorised transactions from their bank accounts or fraudulent credit card applications.

“We wish to inform that these sites are a scam and neither Petronas, nor any of our subsidiaries within the group of companies have authorised them. We appeal to the public not to interact with these malicious sites,” Petronas said.

Petronas added that it has communicated with the authorities regarding this matter.