Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
A phishing scam has been detected that uses the ‘Verified by Visa' authentication program.Webroot's Andrew Brandt claimed that the scam begins with an email that appears to be targeted at shoppers who buy gifts online. Brandt said: “Once you register with the (real) Verified by Visa service, participating merchants permit you to enter a password in addition to your card information.“In addition to providing the purchaser with an additional layer of safety, the password also gives the merchant some assurance that larger-than-normal transactions (like the ones you make during holiday shopping season) will be approved quickly, without triggering fraud alerts.”However, Brandt pointed out that in the email, the user is sent to a web page that asks you for the information you gave the card-issuing bank at the time you first signed up for the credit card. He also commented that the page is clearly more professional, slick and clean than most phishing pages as the form's businesslike appearance serves to reassure the victim that the page really belongs to Visa.“The form data is supposed to be sent over a secure HTTP connection (with an HTTPS prefix before the website's URL in the browser's address bar), but this one clearly is using a standard HTTP connection,” said Brandt.“Verified by Visa is, potentially, capable of helping reduce fraud and may also prevent criminals from using stolen credit card numbers. Just make sure you're signing up for the right program, not handing your wallet over to crooks.”See original article on scmagazineuk.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.