Date Reported 20th January 2005
Apparent Sender Visa
Return Address Visa.com < Update@Visa.com >
Subject Visa January Information Security Update
Format HTML
Method Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.
Bogus Web Content? Yes
URL of web content http://62.193.208.191/aw-cgi/Update_Account_8785834290985743829875894328
78439284372543829874329878492875849328784932543254325432_session_id=
RISK LEVEL MEDIUM
WARNINGS 1. Email claims to be from Visa asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.
2. Visa never send users emails requesting details in this way.
3. URL obviously not Visa !
4. Website traced to Paris, France.
5. URL is disguised as text " To Registered Your Verified By Visa Account Click Here. "
" Member ID: x It has come to our attention, that your Visa Debit Card isn't registered with our Verified By Visa Services. "
If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
|
