Instant Messages Phish Users of Their MSN Login Details

According to security researchers' latest reports that heise Online published on July 7, 2008, a new avalanche of phishing assaults is spreading through Microsoft's MSN network, enticing recipients to visit a page that requests for their MSN login details.

Reports received indicate that users who answer to message would be taken to a Web page that exhibits some entertaining photographs.

According to security analysts, investigations conducted on the phishing scam disclosed that a hidden script checks for any possibility of profit from the captured data. Thus, the script tries to log into MSN using the user's login particulars. Also, soon friends of the account holder are delivered messages carrying URLs that lead them to the same type of pages.

Furthermore, based on the investigations, security analysts and experts said that phishers have been employing a simple method to grab the users' login details. The small-sized prints of phrases like "Privacy Policy" or "Terms of Use" are what indicated that the e-mail pertains to phishing.

Also, as per reports obtained, the spoofed message openly states that login data would be used to show buddies new and entertaining pages. It also claims that it is not linked to any phishing site and if anyone who wants to complain should know that Panama is regarded as the area of jurisdiction. According to experts, this statement is a clear attempt to make the e-mail appears realistic.

Meanwhile, explicating phishing, security analysts said that the particular attack is a deception designed to steal from the users their precious personal data like passwords, credit card numbers, account information, or other sensitive data online.

They (security analysts) also said that the con artists might send uncountable fraudulent e-mails that pretend to arrive from Websites that users trust, such as their credit card firms' Website, or their banking Website, and then request for private information.

Furthermore, these messages are made to appear more genuine by scam artists who embed a link in the messages, posing to have come from an authentic Website, but actually links to an impersonated site where personal details are stolen.

Related article: Inqtana.d Installs on Macs Using Bluetooth

» SPAMfighter News - 7/23/2008