Spyget > Reconfigure Your Outlook with Malware
[TrendLabs | Malware Blog - by Trend Micro] A few days ago, we reported about a phishing email that is supposedly a Microsoft Outlook notification, telling users to reconfigure their program by clicking on the link provided. Instead of an update, however, the user is redirected to a phishing Web site, where s/he is asked for his/her account information, including incoming and outgoing mail server.
[Previous] TrustedSource - Blog - Avoid Housecalls From Rogue 'Mal...
[Next] ATM malware lets criminals steal data and cash | Security...
Some related posts from Technorati and Google.
[TrendLabs | Malware Blog - by Trend Micro] Phishing Attack Targets Microsoft Outlook Users | Malware Blog ...: Mail server information is also necessary, which explains the need for them in the phishing page. Getting hold of such information would gain the phisher total access the affected user’s account, be able to read their emails, possibly steal critical information, or use it to spam other users.
[Latest articles from SC Magazine US News] The many morphs of a phishing/malware scam - SC Magazine US: Overnight Tuesday, the phishing site went down and the attack morphed so that instead of providing a phishing link, the newest versions of the emails now contain a malicious attachment. The attached file is a fake anti-virus product, that tries to scare users into making a purchase, Cluley said.
[Chris Mosby at myITforum.com] Phishing Attack Targets Microsoft Outlook Users - TrendLabs ...: Unlike micro-blogging, social networking, or even banking accounts, fully utilizing a users email information requires mail server information, thus including them in the phishing page. Getting hold of such information would gain the phisher total access the affected users account, be able to read their emails, possibly steal critical information, or use it to spam other users.
[Hack In The Box] Phishing attack targets Microsoft Outlook users :: Hack In The Box ...: A security researcher at the TrendLabs malware blog observed that, unlike phishing attacks that target users of social networking sites or bank websites, login credentials are not enough to hijack an email account - the server information is also required, making this attack less likely to be successful. Many recent phishing attacks have targeted users of sites like Facebook and Twitter, which have proved more effective for cybercriminals attempting to steal personal information.
[MX Logic Security News] Phishing attack targets Microsoft Outlook users: A security researcher at the TrendLabs malware blog observed that, unlike phishing attacks that target users of social networking sites or bank websites, login credentials are not enough to hijack an email account - the server information is also required, making this attack less likely to be successful.
[Satmoz.com] Microsoft Outlook users targeted in phishing attempt: The phishing e-mail arrives in Outlook e-mail in-boxes and looks like it comes from Microsoft. It prompts recipients to reconfigure their Outlook by clicking on a link that leads to a Web site that asks for an account name and password, as well as mail server information, according to the TrendLabs Malware Blog.
[pctechtalk] -=PCTechTalk=- Microsoft Outlook users targeted in phishing ...: The phishing e-mail arrives in Outlook e-mail in-boxes and looks like it comes from Microsoft. It prompts recipients to reconfigure their Outlook by clicking on a link that leads to a Web site that asks for an account name and password, as well as mail server information, according to the TrendLabs Malware Blog.
[Staying Connected - The Official Blog of Tampa Bay's IT Department] Staying Connected - The Official Blog of Tampa Bay's IT Department ...: Phishing e-mails were limited to one subject line, "Microsoft Outlook Notification," he said, while virus-laden e-mails have multiple subject lines, including: Outlook Express Setup Notification, TheBat Setup Notification and Microsoft Setup Notification.
[Speed Communication] Speed Communication » Blog Archive » Home Computer Security: Any e-mail you receive requesting your credit card numbers, bank account numbers, or Social Security number either via e-mail or a web site link is surely an identity theft or phishing scam. Note on Outlook: By following this procedure, you will accomplish two things.
Reflected tags on Technorati: Blog, Malware, Spyget