Thursday, November 10, 2005
New Phishing Threat: Google Giving Away 400$
From Websense Security Labs:
Websense® Security Labs™ has received reports of a new phishing attack that targets users of Google's search engine. Users are redirected to a spoofed copy of Google's front page with a large message claiming "You WON $400.00 !!!". Users are presented with instructions for collecting their prize money. These instructions direct users to enter their credit card number and shipping address. Once the information has been collected, users are directed to Google's legitimate website.
This phishing site is hosted in the United States and was up at the time of this alert.
From Astalavista.com:
Phishing attacks remain a major threat, even though their number has fallen off for two months straight. In mid-October, the Anti-Phishing Working Group (APWG) reported that the number of attacks had decreased by three percent in August, the last month for which data was collected.
The slip in the number of attacks, said the APWG, may have been due to the use of more sophisticated phishing tactics that don't rely on e-mails, but instead turn to "drive-by downloads" of malicious code, including keyloggers, when people surf to specific Web sites.
