Dear clients,

We would like to inform you about frequent phishing attacks as of recently. The messages are not sent by UniCredit Bulbank AD. They have a link, which leads to a phishing site that collects personal and financial data.

We would like to pay special attention to the fact that banks never require from their clients to provide information via messages or emails – they already have that information available at the time of concluding an agreement with the respective client.

In case you receive such suspicious messages, we advise you not to proceed with the actions described in them, do not follow the provided links and do not reply to the sender.

Important recommendations:

• You should only use the genuine, the latest and updated versions of the operating systems, anti-virus programs and browsers
• You should not follow and not execute the instructions provided in those emails sent to you
• You should not download and open any unusual files attached to the email (“invoice”, “scanned document”, etc.) or hyperlinks and input links
• You should check the hyperlinks that the email takes you to, comparing them with the real addresses in your browser
• At least once every three months, you should change the passwords that you use for public online services (including web email)
• You should always check the actual address when responding to such a suspicious email
• You can request from the email service provider to always perform a check if the email address of the sender, the actual address from which the email was sent and the address of the server sending the email correspond.  When the email server configuration is right, such messages should not reach you
• Do not trust emails or websites that require your personal or financial information, including: access passwords, numbers of bank accounts or cards, personal identity number or client identification number
• It is recommended that you use only globally recognized email service providers, such as Google or Microsoft
• Never have your user names or passwords remembered in the browsers
• You should not use one and the same password to access different accounts on the Internet

If you are in the slightest doubt about a misuse of your personal data, you should immediately contact the bank at 0700 1 84 84 or 1 84 84.

---

Additional media information:

Victoria Blajeva, tel +359 (0) 2 9264 993, wjlj/ebwjepwbAvojdsfejuhspvq/ch

Beatris Nikolova, tel +359 (0) 2 9232 528, cfbusjt/ojlpmpwbAvojdsfejuhspvq/ch

Ekaterina Ancheva, tel +359 894 518 193 , flbufsjob/bodifwbAvojdsfejuhspvq/ch