Bogus Amazon account compromise notice leads to phishing
Posted on 29 November 2012.
A phishing email impersonating Amazon is hitting users' inboxes, trying to trick them into believing that various computers connected to their Amazon account and threatening account suspension unless they "confirm" their account information (click on the screenshot to enlarge it):



In spite of the atrocious spelling and grammar mistakes in the email, the link takes victims to a high-quality spoof of the Amazon.co.uk login page that asks users to submit their email address, Amazon account password, then redirects them to a spoofed Amazon.com page asking for their name, address, date of birth and credit card information.

Avira's Sorin Mustaca points out a few interesting details about this phishing attempt: the jumping from one to the other Amazon domains, the fact that some of the spoofed pages' source code was lifted from the legitimate ones, and that the spoofed page actually returns an error if the victim enters an email address that is too long.

Despite the aforementioned jumping, it's highly likely that most users who follow the link won't notice the difference. If they believed that poorly written email came from Amazon, they are probably not the most perceptive of users.






Spotlight

New Zeus variant targets users of 150 banks

Posted on 19 December 2014.  |  A new variant of the infamous Zeus banking and information-stealing Trojan has been created to target the users of over 150 different banks and 20 payment systems in 15 countries, including the UK, the US, Russia, Spain and Japan.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Mon, Dec 22nd
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //