{"id":73443,"date":"2012-04-03T16:18:21","date_gmt":"2012-04-03T16:18:21","guid":{"rendered":"https:\/\/blogs.quickheal.com\/?p=73443"},"modified":"2012-04-03T16:18:21","modified_gmt":"2012-04-03T16:18:21","slug":"new-visamastercard-scam","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/new-visamastercard-scam\/","title":{"rendered":"New Visa\/Mastercard Scam"},"content":{"rendered":"<p style=\"text-align: left;\">Today, we\u2019ve received another phishing email purporting to be from Visa with a spoofed email<br \/>\naddress.The fake mail carries a subject line: &#8220;Security Notice&#8221;. It has an attached html file &#8220;VisaMasterCard.htm&#8221;. The mail instructs the users to download the attached file and fill it up in order to get security updates for their accounts.<\/p>\n<p style=\"text-align: left;\">Once executed, the downloaded file looks like this:<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-73438\" src=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa1.jpg\" alt=\"\" width=\"512\" height=\"441\" \/><\/a><\/p>\n<p style=\"text-align: left;\">It is just a replica of the original page which is getting executed from your machine. As soon as you click on \u201cUpdate your Account\u201d it will take you to the phishing link shown below which displays an online form to fill.<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-73439\" src=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa2.png\" alt=\"\" width=\"316\" height=\"350\" \/><\/a><\/p>\n<p style=\"text-align: left;\">After clicking on the &#8216;Complete&#8217; tab, it will show you the following prompt:<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-73440\" src=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa3.png\" alt=\"\" width=\"300\" height=\"129\" \/><\/a><\/p>\n<p style=\"text-align: left;\">If you click on the OK tab on this prompt, it will take you to the genuine website of VISA.<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-73441\" src=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa4.png\" alt=\"\" width=\"400\" height=\"365\" \/><\/a><\/p>\n<p style=\"text-align: left;\">This convinces users that everything is fine. But in reality all the confidential data of the user is transferred to the attacker.<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa5.bmp\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-73442\" src=\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/04\/Visa5.bmp\" alt=\"\" width=\"650\" height=\"108\" \/><\/a><\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/www.quickheal.com\/\">Quick Heal<\/a> blocks any malicious URL and protects its users.<\/p>\n<p style=\"text-align: left;\">\n","protected":false},"excerpt":{"rendered":"<p>Today, we\u2019ve received another phishing email purporting to be from Visa with a spoofed email address.The fake mail carries a subject line: &#8220;Security Notice&#8221;. It has an attached html file &#8220;VisaMasterCard.htm&#8221;. The mail instructs the users to download the attached file and fill it up in order to get security updates for their accounts. Once [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,24],"tags":[22,23,25,26],"class_list":["post-73443","post","type-post","status-publish","format-standard","hentry","category-email","category-malware","tag-email-malware","tag-fraudulent-email","tag-phishing","tag-rogueware"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/73443"}],"collection":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/comments?post=73443"}],"version-history":[{"count":0,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/73443\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media?parent=73443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/categories?post=73443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/tags?post=73443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}