Forest Global Training Partners

Cyber Risks · Cisco Talos

Hook, Line & Sinker: Catching Unsuspecting Users Off Guard

Summary: Cisco Talos reports that over the past couple of months it has observed phishing attacks against customers of credit card companies, banks, credit unions, insurance companies, PayPal and Amazon, using HTML documents attached to emails or embedded in the message body to present official-looking pages. The forms are customized to each impersonated business and request data including user IDs, passwords, ATM PINs, SSNs, mother's maiden names, credit card numbers with CVV2, and bank account and routing numbers, with submissions sent to attackers via POST requests to malicious domains.

What you should know: These campaigns skip malware entirely and ask victims for the full identity-and-account bundle - SSN, PIN, CVV2, routing number - which is enough to take over accounts and move money, and the HTML attachment arrives as a file your email controls may not treat as executable.

Read the original at Cisco Talos ↗

Topics
Malware
Related