Cyber Risks · Krebs on Security

MtGox Phishing Campaign Hits Bing, Yahoo!

Summary: An active phishing campaign targeting MtGox.com account holders hijacked top search results on Bing and Yahoo, redirecting clickers to mtpox.com, a look-alike domain registered on June 12, 2013, less than 24 hours before the report. The phisher copied and pasted code from Mtgox.com, and hovering over the fake site's username or password fields produced the same warning present on the real site advising visitors to check for the green extended validation certificate.

Bottom line: The phisher registered mtpox.com less than 24 hours before the campaign went live, and the fake site was hosted on an IP address that also served several unrelated legitimate domains, so a look-alike domain can be stood up and pointed at your customers faster than most takedown or blocklist processes run.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related