Online Scam Traps Users With E-Greetings
A new kind of Internet scam has attacked inboxes all over Australia. The consumer watchdog of Victoria advises users to immediately delete the unknown e-greeting card they receive in their mailbox.
The spoof e-mails notifying a fake greeting card were phishing scam of the latest version from online fraudsters, said Victorian Consumer Affairs Minster Daniel Andrews. ZD Net Australia published Andrews' statement on August 2, 2007.
It is yet another trick that attackers have employed to make users download malicious code on their systems, said Zulfikar Ramzan, senior principal researcher for Symantec. Ramzan thinks attackers have realized the better outcome of using simple techniques. Techshout.com published this in news on July 23, 2007.
According to McAfee's security research and communications manager, David Marcus, the e-greeting card is an effective lure because it is better able to convince users to click. Technshout.com published this on July 23, 2007.
Mr. Andrews said that this particular phishing e-mail claims that an unnamed family member or friend has sent an e-greeting card to the recipient. The subject line in the e-mail says, "you have received a postcard from a family member" or "you have received a greeting card".
The e-mail then instructs the recipient to click a link in order to view the greeting card. But as the user does so, a spyware program enters the system, which reads the user's keystrokes while he/she types.
The spyware takes a fraction of a moment to install on the computer so that its user can't even notice it with the greeting card displaying very fast. But by looking at the e-mail source, it may be possible to detect the spyware. If the e-mail is redirected, it needs immediate cleaning.
In general, criminals launch phishing scams to steal consumers' credit card or bank account details or other personal data. If someone clicks on the link, the spyware succeeds to collect the information that the fraudsters would use to commit identity and/or credit card fraud, Mr. Andrews said.
Anyone who receives this e-mail or any other that appears dubious should delete it right away, Mr. Andrews added.
Related article: Online Card Fraud Shows Greater Tendency Than Chip and Pin
» SPAMfighter News - 13-08-2007