OFFICIAL SECURITY BLOG
May 21, 2014 | BY Christopher Boyd
Be warned that there are some typo happy phishers looking out for login credentials. It’s time to take a trip down the Amazoon:
Verify your Amazoon account
Dear Amazon user,
We need to confirm your account information,
you must confirm your amazon account before we close it.
Click the link below to confirm your account information using our secure server.
Clicking the “Manage” link will take victims to a page asking for username and password information:
After this, they’re faced with a page asking for personal information (name, address, phone number and so on):
The page after this one is broken – looks like the host has taken it down mid-blog so hopefully nobody else will be scammed by this one. Typically the pattern for this kind of thing would be login details, personal information then card data. While we can’t say for sure what lay in wait at step 3, we can say to be on your guard for any more emails from “Amazoon” and never hand over personal data such as card details in response to emails you’ve been sent.
Christopher Boyd (Thanks to Aaron for sending over)