Polish firms and bank customers hit by fake Lidl and PKO Bank phishing scams

Cybercriminals in Poland are impersonating the retailer Lidl and the financial institution PKO Bank Polski in coordinated phishing attacks. The Lidl scheme involves sending fraudulent collaboration invitations to Polish companies, sometimes using false LinkedIn profiles and mimicking a Spanish Lidl store to harvest corporate data. PKO Bank Polska has warned that scammers are distributing emails that appear to be official operation confirmations, attaching malicious Excel files that can install malware, steal personal data, and give attackers access to bank accounts. Both incidents highlight a rise in targeted cyber fraud against Polish businesses and consumers, prompting warnings from the affected organisations.

Authorities advise recipients to verify sender addresses, avoid opening unexpected attachments, and contact official hotlines for confirmation.