All the latest UK technology news, reviews and analysis

Verified by Visa phishing attack spotted

by Phil Muncaster

19 Nov 2009

Comment: 1

  • Tweet this
Phishing
Phishing scams are becoming increasingly sophisticated

Security experts warned today that the Verified by Visa online authentication scheme has become the latest lure used by phishers hoping to harvest personal information from unsuspecting shoppers.

The scam begins with users being sent an email inviting them to join the scheme, but clicking on the link takes them to a fake site (see screenshot below).

Andrew Brandt, a malware researcher at Webroot, explained in a blog post that the site then requests "all the information you gave the card-issuing bank at the time you first signed up for the credit card".

"That's Red Flag number one, but it's worth repeating. In a real sign-up form for Verified by Visa, you won't be asked to provide your mother's maiden name, social security number, birth date, or any other sensitive details that you wouldn't otherwise enter into a web-based order form while shopping online," he said.

"The page created by the phishing gang responsible for this scam is clearly more professional, slick and clean than most phishing pages. The form's businesslike appearance serves to reassure the victim that the page really belongs to Visa."

Nigel Hawthorn, European vice president of marketing at network security vendor Blue Coat Systems, added that users need URL filtering technologies as standard, because regular anti-virus tools will not protect against visiting phishing sites such as this.

Phishing-grab

"The initial lure is sent out by email but the real threat is via the web, so you need to make sure you have web defences and not just email and spam defences," he said.

Hawthorn added that Verified by Visa has been held up as such a "paragon of virtue" in protecting users against online threats that it is a natural place for the criminals to strike.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

The workplace of the future poll - in association with IBM

What will be the biggest change to corporate technology in the future?

89%

6%

1%

3%

1%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Riso

Colour printing: why the bill keeps outstripping the budget

The wrong printers, for the wrong tasks on the wrong contracts

Qlikview

Magic quadrant for business intelligence platforms

Who leads the BI pack and who should we be watching out for?

Presales Consultant - Storage and Virtualisation

Presales Consultant - Storage and Virtualisation - Netapp...

Virtualisation Architect - VMware Citrix Microsoft VDI Server

Virtualisation Architect / Principal Consultant - VMware...

Project Manager - Microsoft Vmware Desktop Server Storage

Project Manager - Microsoft, Vmware, Data Center, IT...

Microsoft Consultant Server AD Exchange Lync Systems Center x4

Microsoft Consultant x4 - Server 2008 AD Exchange 2010...

Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.

To send to more than one email address, simply separate each address with a comma.