Trend Micro Facebook TrendLabs Twitter Malware Blog RSS Feed You Tube - Trend Micro
Search our blog:

  • Recent Posts

  • Calendar

    September 2014
    S M T W T F S
    « Aug    
     123456
    78910111213
    14151617181920
    21222324252627
    282930  
  • About Us

    Aug4
    3:59 am (UTC-7)   |    by

    Olympic tickets, anyone? They are available on the Internet of course, but users beware: the bad guys are still working hard to steal from online users as the 2008 Beijing Olympics approaches.

    Trend Micro Senior Advanced Threats Researcher Paul Ferguson discovered a fake Beijing Olympics Web site supposedly selling tickets. The Los Angeles Times reports that Olympics officials have already asked federal courts to shut down certain Web sites that pose as sellers of tickets but are actually stealing credit card numbers and other confidential information.


    Figure 1. Home page of Olympic ticket-selling phishing site

    The TrendLabs Content Security Team tried to verify the phishing site. The Web site hxxp://www.{BLOCKED}gticketing.com asks users to register before buying tickets.


    Figure 2. Users are asked to register for an account.

    Filling out the form is already questionable because some confidential information are required in the registration. We tried to enter bogus delivery address and phone numbers and the site accepted all the information, regardless of the validity of the information we entered. This shows that the supposed ticket sellers don’t intend to deliver the tickets after payment.

    After registering, the user now can sign in to buy tickets.


    Figure 3. Users are asked to sign in using the registered information.

    The site then asks for credit card numbers and CW2 numbers after a user has chosen which ticket to purchase.


    Figure 4. Users are then asked to choose which events to buy tickets to.


    Figure 5. Users are asked to provide payment information.

    There are already hundreds of victims who lost large amounts of money to this site, according to a report by the Los Angeles Times. The said Web site is already blocked by Trend Micro Smart Protection Network.





    Share this article
    Get the latest on malware protection from TrendLabs
    Email this story to a friend   Technorati   NewsVine   MySpace   Google   Live   del.icio.us   StumbleUpon




    Comments are closed.



     

    © Copyright 2013 Trend Micro Inc. All rights reserved. Legal Notice