Russian Duma deputy warns of fake Gosuslugi and EMIAS update scams
In short
State Duma deputy Anton Nemkin warned that fraudsters are posing as employees of state and medical institutions and offering to install fake “updates” for the Gosuslugi portal or the EMIAS medical system. The file they send can give access to a device's data and functions, he said. Nemkin advised downloading apps only from official sources and not following links from calls or messages.
Read the full story 1 min read
State Duma deputy Anton Nemkin warned that fraudsters are posing as employees of state and medical institutions and offering to install purported “updates” for the Gosuslugi state services portal or the Unified Medical Information and Analytical System (EMIAS). RIA Novosti carried his warning, and both Vedomosti and Kommersant reported it, citing RIA Novosti. [ 1 , 2 , 3 ]
According to the deputy, the scammers send a malicious file that, once installed, gives attackers access to data and functions on the victim's device. Kommersant reported that the scheme relies on the victim's trust — the person is persuaded that a well-known service needs updating — and that the fraudsters also create a sense of urgency. [ 2 , 3 ]
Nemkin said state and medical services do not require installing applications via a link received in a call or a message. Applications should be downloaded only from official sources, he said, and information about updates should be checked inside the service itself. He advised against following links in suspicious messages and said people should tell elderly relatives that “updates” cannot be installed over the phone by an unknown caller; if in doubt, he said, call the organisation back on its official number. He described the fight against such schemes as a matter of digital literacy. [ 1 , 2 , 3 ]
Vedomosti also reported related official activity. It said that on 6 October, at the plenary session of the “Digital Solutions” forum, Prime Minister Mikhail Mishustin instructed the Digital Ministry to work out additional conditions for logging in to the Gosuslugi portal, as well as conditions for restoring access to the platform. The same day, Vedomosti said, RIA Novosti reported, citing materials for the forum, that a “green button” would appear on Gosuslugi — a mechanism to cancel the “red button” and lift restrictions imposed by participants in the Anti-Fraud system. [ 2 ]
Why it matters
The warning concerns two widely used public service platforms and describes a scheme aimed at obtaining access to victims' devices, so the practical advice in it applies to anyone using state services online. Vedomosti also reported that the government is reviewing how users log in to and restore access to Gosuslugi, indicating official attention to the portal's security. The deputy framed the issue as one of digital literacy rather than of a specific technical flaw.
Key facts
- Fraudsters present themselves as employees of state and medical institutions and propose installing “updates” for Gosuslugi or the Unified Medical Information and Analytical System (EMIAS), according to State Duma deputy Anton Nemkin. [ 1 , 2 , 3 ]
- The file sent to victims can give attackers access to data and functions on the device, the deputy said. [ 2 , 3 ]
- Nemkin said state and medical services do not require installing applications via a link from a call or message. [ 1 , 2 , 3 ]
- He said applications should be downloaded only from official sources and update information checked inside the service itself. [ 1 , 2 , 3 ]
- He advised not following suspicious links, telling elderly relatives about the risk and calling an organisation back on its official number if in doubt. [ 2 , 3 ]
- Kommersant reported that the scheme relies on the victim's trust and creates a sense of urgency. [ 3 ]
- Nemkin said combating such schemes is a matter of digital literacy. [ 2 ]
- On 6 October, Prime Minister Mikhail Mishustin instructed the Digital Ministry to work out additional conditions for logging in to Gosuslugi and for restoring access to the platform, Vedomosti reported. [ 2 ]
Confirmed by several sources
- Fraudsters offer to install fake “updates” for Gosuslugi, and in some cases for EMIAS, while posing as employees of state or medical institutions. [ 1 , 2 , 3 ]
- The warning was given by State Duma deputy Anton Nemkin. [ 1 , 2 , 3 ]
- State and medical services do not ask users to install applications via a link from a call or message, and apps should be taken only from official sources. [ 1 , 2 , 3 ]
Still unclear
- Whether the warning follows a specific increase in attacks or a particular incident. None of the documents states a trigger, a case or any figures behind the warning.
- How many people have been affected or how much money or data has been lost. No scale, victim numbers or losses are given by any document; the deputy describes the scheme, not an incident.
- The status and timing of the additional login conditions for Gosuslugi ordered by the prime minister. Reported only by Vedomosti, which says the Digital Ministry was instructed to work them out; no deadline or detail is given.
- The exact mechanism of the “green button” for lifting Anti-Fraud restrictions. Mentioned only by Vedomosti, citing RIA Novosti and forum materials, without technical detail.
What local media are saying
Timeline, local time
- RIA Novosti publishes State Duma deputy Anton Nemkin's warning about scammers offering a fake Gosuslugi update. [ 1 ]
- Vedomosti reports that the scheme also targets EMIAS and that the file sent to victims can give access to device data, and notes the prime minister's 6 October instructions on Gosuslugi access. [ 2 ]
- Kommersant reports the warning, adding that the scheme relies on the victim's trust and creates a sense of urgency. [ 3 ]