Support our Sponsors


uClip Clipping Path Service



Main Menu
Home
News
Blog
Links
Search
Resources
Windows Software
Mac Software
Hosted Solutions
Server Software
Mobile Solutions
Login



Syndicate

AOL Customers Under Attack From Latest Phishing PDF Print E-mail
Written by Administrator   
Friday, 14 January 2011 06:00

The headers of the contented emails with subject line bearing the title "Billing update on file must be performedz" are spoofed off, so that they appear to be sent from the original AOL Member Billing. The mails are sent from the internet address< This e-mail address is being protected from spambots. You need JavaScript enabled to view it >


An AOL template is used for writing the main message along with an AOL Member Services banner. According to the enclosed message, the victim is reminded to update his/her bank account for attaining better and secured banking services. For adding values in the message, the contender claims this action to be a part of a regular verification
activity materialized by the latest developed SSL servers on behalf of AOL.

The recipient is also notified that in case of failure to update an account, the liberty of shopping on the website will automatically result in restraints.

The enclosed message also contains a link called "Update your information", which prompts a user with a web page wherein, all personal information including name, credit card details, address, date of birth, AOL username and password, and even social security number is to be filled up.

Graham Cluley, Senior Technology Consultant at Sophos, commented about the ways by which netizens falls easy prey of malware authors, scammers, and phishers on the ground of semi-believable things. Even though many wise users immediately send these mails in trash, some users are always exposed to this vulnerability, as reported in nakedsecurity.sophos on January 4, 2011.

Taking into consideration these vulnerabilities in relation to the latest scam, security experts at AOL has advised netizens to avoid providing personal information in mail because genuine businesses rarely seeks credit card numbers, passwords, or other personal information via e-mails.

Netizens are also pertained from opening the URL directly through the links for these links are likely to trigger a spoofed site and take down all personal information of the user as mentioned above.


Read full article...
 
Polls
The Spamproblem is
 
Who's online
We have 85 guests online
News Flash
How do you fight spam?

Spam is a growing pain. How are you combating spam?

Submit your favorite spam fighting links to us