American Express Customers Targeted by Novel Phishing Attack

guest · Jul 16, 2019

American Express Customers Targeted by Novel Phishing Attack
July 16, 2019
https://www.bleepingcomputer.com/ne...-customers-targeted-by-novel-phishing-attack/

A phishing attack using a novel technique to steal credentials from American Express customers was recently found in an email inbox protected using Microsoft’s Office 365 Advanced Threat Protection (ATP) by Cofense Phishing Defense Center researchers.

[...] instead of using the regular hyperlink to the landing page trick, this one used the HTML element to hide the malicious URL from antispam solutions.
It also helps to hide it from the target since, on hover, the hyperlink will only show the end part of the malicious link, without the domain used to host the landing page.

"The broad stroke attack would be very efficient when sent en masse, especially with its clever technique for bypassing URL filters and email gateways," concludes the Cofense research team.
It also is important to keep in mind that companies, especially financial organizations such as banks, will not request highly sensitive information via online forms.
Click to expand...

Cofense: This Phishing Attacker Takes American Express—and Victims’ Credentials

guest · Sep 3, 2022

Credential phishing attack targeted 16,000 emails at nonprofit agency
By Karen Hoffman - September 1, 2022

Researchers have uncovered an effective recent phishing attack where the fraudster claims to be the prominent charge card brand American Express, and demands that cardholders open an attachment and contact the card company immediately regarding the cardholder’s account, according to a Thursday research post from Armorblox.

“Attackers took advantage of the loyalty and trust victims have in the brand, American Express, in an attempt to steal confidential information,” according to the post, referencing the email spoofing of the well-regarded card brand.
Click to expand...

However, the main link, within the email attachment message, navigated to a fake American Express-branded landing page that prompted victims to sign in to verify the account, which of course puts cardholders right where scammers want them.

“Credential phishing is the most prominent attack type we see against financial firms,” said DJ Sampath, co-founder and CEO of Armorblox. “This zero-day attack contained a malicious URL within the attachment, and protecting against this type of targeted attack is two-fold.”
Attackers used a known domain to launch this attack, Sampath said. However, since legacy and native email security solutions predominantly stop mass phishing attacks that originate from known malicious domains, many companies do not have the capabilities to stop these sophisticated attacks, he pointed out.
Click to expand...

Since American Express is popular with business users, who are often issued their charge card by their employer, this tactic plays to the cardholder’s fear that they might run afoul of their business’s rules regarding expenses and reimbursement.

“Vendor compromise and supply chain attacks are the biggest threats to financial firms,” Sampath said. “And successful attackers can do extended damage to the organization’s reputation and financial standing.”
Click to expand...

Armorblox: American Express: This is a Secure Message from your Attacker

By Lauryn Cash - September 1, 2022
The email attack spoofed American Express, a multinational credit card service company. The email attack looked like a legitimate notification email from American Express, that included an attachment informing recipients that an account verification was mandatory; otherwise, the account would be suspended. The main link, within the email attachment message, navigated to a fake American Express-branded landing page that prompted victims to sign in to verify the account.
Click to expand...

Rasheed187 · Sep 2, 2022

Wait a minute, so American Express isn't even using any 2FA solution?

Log in or Sign up

American Express Customers Targeted by Novel Phishing Attack

guest Guest

guest Guest

Rasheed187 Registered Member

Log in or Sign up

American Express Customers Targeted by Novel Phishing Attack

guest Guest

guest Guest

Rasheed187 Registered Member

Useful Searches