A phishing campaign has been uncovered that attempts to entice MasterCard
users to divulge account details by promising money off future purchases.
According to
SophosLabs, the content
of this phishing email is unusual since it attempts to lure users to sign up to
SecureCode and receive extra security protection for their MasterCard accounts,
by offering a 16 per cent discount on future purchases made with the card.
In reality, users who click on the link contained within the email are
redirected to a phishing site, set up to look almost identical to the genuine
MasterCard website. Visitors are then asked to supply confidential information
including credit card expiration date, date of birth and the three digit
security code located on the back of the card – ample information for the
cybercriminals to then access and use the account in question to steal money.
"MasterCard has been very successful in positioning SecureCode as the answer
to online fraud, and with so many computer users growing increasingly worried
about the risks of shopping online, the prospect of greater security and money
off can be too much to resist," said Carole Theriault, senior security
consultant, Sophos.
"What's more, phishers are putting a lot more effort into their scams these
days and to the undiscerning eye, it's almost impossible to tell this isn't the
real MasterCard site."
Do you agree?
Have your say on this article