Yahoo! Attacked by Phishing Campaign

According to the security researchers at Vietnamese security firm Bkis (Bach Khoa Internet Security) a new series of phishing emails, pretending to be yahoo notifications is targeting web users.

Bkis stated that the phishers responsible for this malicious campaign are pretending as "The Yahoo! Mail Team" and are sending web users phishing e-mails with subject line as "Update Your Account!!!".

The phishing e-mail states the owing to the jamming in all Yahoo accounts; Yahoo! would be deactivating some of its accounts, both premium and free accounts for some security reasons. To avoid the shutting down of the e-mail receiver's account user will have to confirm his email by furnishing the login information that includes the Yahoo ID, Yahoo! Mail address, Yahoo password, Country, and Birthday.

To sound genuine and authentic to the web users', the phishing email informs the users' there accounts will not be deactivated, if they fill the form and their accounts will remain operational. Besides, the e-mail apologizes for the inconvenience that it is causing to the users.

Innocent web users who respond to these mails and furnish their credentials will send their personal information to a service.mailing21@yahoo.com.hk address, which is controlled by the phisher.

Bkis informed netizens that there is no company to whom they are required to provide their login details in an e-mail.

Hence, security experts have recommended web users to act smartly and stay alert of such e-mails, no matter how authentic they appear. Moreover, they have suggested users to install spam filters because this can help lessen the number of phishing e-mails.

Commenting on the issue, Luis Corrons, Technical Director at security firm PandaLabs stated that phishing is nothing new to the web world. What is the most surprising element is that the techniques used to scam users' though remain so simple, the content and design is very well-organized. It's very easy to fell prey to such tricks, as reported by indianweb2 on October 4, 2010.

Related article: Yahoo Gets “Yam”med by a Worm

» SPAMfighter News - 10/9/2010