Trend Micro Facebook TrendLabs Twitter Malware Blog RSS Feed You Tube - Trend Micro
Search our blog:

  • Recent Posts

  • Calendar

    August 2014
    S M T W T F S
    « Jul    
     12
    3456789
    10111213141516
    17181920212223
    24252627282930
    31  
  • About Us

    Apr2
    1:22 am (UTC-7)   |    by

    The Trend Micro Content Security team recently discovered a Cable Cable Inc. domain hosting a Walmart phishing survey. Cable Cable Inc. is a television, Web, and phone service provider based in Canada. Walmart, of course, is the chain of discount department stores.

    As shown in the following sample phishing page, hosted at http://{BLOCKED}www.cablecable.net/~brook/SpringSurvey/walmartstores.com/walmartstores.com/index.html, Walmart customers are required to provide their rating as well as contact information such as their full name, phone number, and email address:


    Figure 1. Screenshot of bogus Walmart phishing survey page.

    After clicking on the “Proceed” button, a user is redirected to the the following confirmation page asking the user for additonal and more valuable information (for cybercriminals that is) such as a user’s credit card number, card expiration date, card verification value, and PIN.


    Figure 2. Screenshot of Walmart phishing survey verification page.

    The phishing URL is now already blocked by the Trend Micro Smart Protection Network. Cybercriminals lately seem to be favoring social engineering techniques to trick users into divulging their personal information in exchange for gift certificates or any promised freebies. The economic recession might explain this. Then again, cybercriminals are known for being creative.

    Other similar threats include:

    Users are advised to not participate in surveys that come from unsolicited messages.





    Share this article
    Get the latest on malware protection from TrendLabs
    Email this story to a friend   Technorati   NewsVine   MySpace   Google   Live   del.icio.us   StumbleUpon






     

    © Copyright 2013 Trend Micro Inc. All rights reserved. Legal Notice