10 August 2005 Lax lured by phishing fax-backs - Sophos warns of latest internet fraud trend
Experts at SophosLabs™, Sophos's global network of virus, spyware and spam analysis centers, have warned users about a new phishing campaign which tries to get innocent computer users to fax their credit card and bank information directly to the phishers rather than visit a bogus website. The emails, which claim to come from Paypal (the payment system used by the popular Ebay auction website), tell users that someone tried to reset their password. The email urge the user to fax back information which will assist in the investigation into the alleged security breach. The emails point to a Microsoft Word document hosted on a Polish website, which the recipient is instructed to download and complete with their bank account details (including PIN information), credit card numbers and login details before faxing back. Sophos has confirmed that the telephone number mentioned in the emails is hosting an active fax machine. The email looks like the following: An example of the email The email urges you to fax confidential information to the phishers. "In the last few days we have seen a number of attempts by phishers to use this technique, and it's possible that some people who know that they need to be careful about entering their confidential information on a bogus website may think that completing and faxing back such a form is somehow safer," said Graham Cluley, senior technology consultant for Sophos. "It's important that no-one is lax when it comes to their internet security, and keep their critical banking and credit card details close to their chest." The phishers urged recipients to fax back their confidential information The phishers urged recipients to fill in a Word document and fax back their confidential information. "Interestingly, the phishing gang may have made a huge blunder by including the fax number in their scam. PayPal and the authorities are sure to follow that lead when investigating this matter further," continued Cluley. Sophos recommends companies protect themselves with a consolidated solution which can defend businesses from the threats of both spam and viruses; and that users do not open or reply to unsolicited emails. http://www.sophos.com/spaminfo/articles/phishfax.html Baktos, Rahman, Wassenaar/NL ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs ------------------------ Yahoo! Groups Sponsor --------------------~--> <font face=arial size=-1><a href="http://us.ard.yahoo.com/SIG=12h3mndjk/M=323294.6903899.7846637.3022212/D=groups/S=1705329729:TM/Y=YAHOO/EXP=1123795084/A=2896125/R=0/SIG=11llkm9tk/*http://www.donorschoose.org/index.php?lc=yahooemail";>Take a look at donorschoose.org, an excellent charitable web site for anyone who cares about public education</a>!</font> --------------------------------------------------------------------~-> Ti urang, nu urang, ku urang jeung keur urang balarea Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/Baraya_Sunda/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
