Archive for May 4th, 2009


May4
by Abigail Villarin (Fraud Analyst)

The Content Security Team encountered a phishing page of VONAGE.

Vonage is a publicly-held commercial voice over IP (VoIP) network and SIP company that provides telephone service via a broadband connection.

The phishing page looks exactly like Vonage official log in page. The phishing site asks the user to enter their user name and password. Once done, the information will be sent to a remote user, thus gaining unauthorized access to the affected user’s account.

Click for larger view

The phishing page is already blocked by the Smart Protection Network.

Quite similar to Vonage is Skype, which is also another popular VoIP service. Although contrary to the former, the latter does not require any special hardware to make long-distance calls. It has also been used as medium for distributing malicious files. Here are some of the previous reports related to Skype:

If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!

 

May4

After the Walmart phish, comes the KMart survery form phish wherein it promises to add a $150 to the users account just by taking the survey form. As shown in the verification page, the user has to rate each criterion provided and then the personal information of the user such as full name, phone number and email address as shown in Figure 1.

Click for larger view Click for larger view

Clicking the proceed button is a Thank you page and a statement wherein to be able to add to the user’s account the $150, the user must enter their Card Number and Card PIN as shown in Figure 2.

After clicking on the ‘Continue’ button, it will already proceed to the legitimate KMart webpage.

As for the phishing URL, it’s already blocked by the Trend Micro Smart Protection Network.

 


© Copyright 2010 Trend Micro Inc. All rights reserved. Legal Notice