Not Your Average Phishing Scam

ronjor · Jan 3, 2007

One of the first phishing scams to catch Security Fix's eye in the new year -- a counterfeit Amazon.com login page -- may set the tone for the sophistication of online schemes involving fake bank and e-commerce sites in 2007. The bogus site, which was active as of early Tuesday morning, makes use of the real Amazon.com site in an effort to fool visitors into entering their real usernames and passwords.
Click to expand...

Brian Krebs

Rmus · Jan 4, 2007

Very informative article, Ron.

I noticed that the phishing "lure" is via email notification:

The lure in this phishing attack is an e-mail that warns the recipient about supposed unauthorized activity on his or her Amazon account and directs the user to reset the account's credentials. Anyone who enters a real Amazon username and password is asked to provide their date of birth, address and Social Security number.
Click to expand...

I received this several days ago:

We recently have determined that different computers have logged onto your Online Banking account, and multiple password failures were present before the logons. For your security we temporary suspended your account, for restoring your account you need to confirm your informations using the form below. If this is not completed by January 07, 2007, we will be forced to suspend your account indefinitely, as it may have been used for fraudulent purposes.

To restore your Online Banking account use the following form:

bankofamerica.com/state.cgi?adlink=000847....
Click to expand...

The best form of protection is to check with *every* company, bank, order house, that you do business with on the internet to see what their policies for acccount notification are. My bank doesn't do it by email.

Some advise not to click on any link, but rather, go directly to the site and log into your account as you would regulary do. An added protection is to bookmark the IP address of the site.

Others ask that you phone if such an email is received.

regards,

-rich

________________________________________________________________
"Talking About Security Can Lead To Anxiety, Panic, And Dread...
Or Cool Assessments, Common Sense And Practical Planning..."

--Bruce Schneier

Log in or Sign up

Not Your Average Phishing Scam

ronjor Global Moderator

Rmus Exploit Analyst

Log in or Sign up

Not Your Average Phishing Scam

ronjor Global Moderator

Rmus Exploit Analyst

Useful Searches