.
/v3-uk/news/1974603/phishing-attack-targets-partypoker
22 Feb 2007, Iain Thomson , V3
Security experts are warning of a phishing attack targeting gamblers on the PartyPoker website.
Emails were spammed out last night purporting to come form the gaming site, which is the largest online poker site in the world.
The spam warns of news about 'legislation' affecting online poker players, and asks users to log-in using a compromised link.
'Dear poker player, Information for US and all over the World based customers on the passing of the Unlawful Internet Gambling Enforcement Act of 2006. On September 30, 2006, the United States Congress passed The Safe Port Act,' reads the email.
'That measure also contained certain provisions known as the Unlawful Internet Gambling Enforcement Act of 2006. On October 2, 2006, Party Gaming made an announcement regarding the impact the act would have on business when, as expected, it is signed into law.'
The email includes a link which leads to a well designed fake PartyPoker log-in page which is then used to harvest account details.
This would allow the phishers either to gamble using account holders' money or possibly transfer funds to other accounts.
Do you agree?
So what???
Phishing attacks are becoming a commodity. And so are stories about them that don't mention a word about how users should protect themselves. Telling people about fake emails and fake web sites does not get a user to the legitimate web site. Start telling people to bookmark (or add to favorites for IE users) the legitimate web sites where they conduct financial transactions and thereafter use only the bookmarks. Start focusing on getting people to the real web sites and they won't have to worry about fake web sites - or getting phished.
Posted by Al Johnson, 22 Feb 2007