It seems that cybercriminals will really stop at nothing to further their malicious activities. Trend Micro fraud analysts received yet another spammed message obviously designed to catch unwitting Caisse d’Epargne, a French semicooperative bank, customers into their phishing trap.
Founded in 1818, with around 4,700 branches in France, Caisse d’Epargne is active in both the retail and private banking segments. It also holds a significant stake in the publicly traded investment bank, Natixis.
The spammed message informs customers that the bank found some problems with their accounts. It then informs the recipients that the bank needs them to fill in additional information by clicking an embedded link in the email to keep them protected. Clicking the link, however, redirects users to a phishing page that looks a lot like the bank’s official website.
As expected, the phishing site asks users to enter their personal identification numbers (PINs) to validate their accounts. There are, however, noticeable differences between the phishing site (marked in red in Figure 2) and the bank’s legitimate site (marked in green in Figure 3) if only users take time out to make sure they are not being victimized by wily cybercriminals.
In fact, the bank’s legitimate site even has a security warning (marked in green in Figure 4) to all of its customers regarding the said phishing attack since January 28.
The continued proliferation of phishing attacks, as evidenced by this, supports the “2009 Third Quarter Report” released by the Anti-Phishing Working Group (APWG). Based on the group’s global phishing survey, the third quarter of 2009 broke the record with 40,621 unique phishing reports as of August.
However, what is more often overlooked can be summarized by the question, “What really happens after a phishing attack?” Trend Micro partner, RSA Security, gave some really frightening answers to this question. The article describes a real-life scenario that shows how cybercriminals buy credit card information, which they use to purchase high-end merchandise online. Fraudsters then resell these products, enabling them to make substantial profits.
Considering the persistence with which cybercriminals operate, users should thus be extremely cautious every time they conduct online transactions. Fortunately, Trend Micro™ Smart Protection Network™ already protects product users from this particular threat by preventing the spammed message from even reaching their inboxes and by blocking user access to the phishing site.
Non-Trend Micro product users can also stay protected from malicious URLs by using one of Trend Micro’s free tools, Web Protection Add-On.