{"id":37986,"date":"2014-09-16T10:55:10","date_gmt":"2014-09-16T17:55:10","guid":{"rendered":"http:\/\/blogs.mcafee.com\/?p=37986"},"modified":"2025-06-06T02:05:26","modified_gmt":"2025-06-06T09:05:26","slug":"top-3-phishing-attacks-show-similar-behavior","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/top-3-phishing-attacks-show-similar-behavior\/","title":{"rendered":"Top 3 Phishing Attacks Use Similar Tricks"},"content":{"rendered":"

Phishing scams are immensely popular and we see millions of phishing messages everyday. Today we offer the top three phishing scams that attempt to steal your web mail credentials.<\/p>\n

Web Mail Scam<\/strong><\/h2>\n

This scam starts with an email that appears to come from Administrator or Helpdesk and requests that you validate or update your account. Clicking on the link in this message will take you to a fake Outlook Web Access Login page. This page is generally hosted on sites that are created by using free services. Attackers also use vulnerable servers (running CMS) to upload these fake pages, which allow scammers to collect your username and password for their own malicious use.<\/p>\n

 <\/p>\n

\"WebMail<\/a><\/p>\n

iTunes Scam<\/strong><\/h2>\n

This attempt starts with an email purporting to be from the Apple Store. The email informs users that their accounts may have been hijacked. Users are asked to click a link and supply information to restore the account.<\/p>\n

Those panicked into clicking the link will be taken to a bogus website that looks like a genuine Apple login page. Attackers often use an “apple.com” string in the link to make the link appear legitimate, for example: hxxp:\/\/itunes.id.apple.com.example.com\/.<\/p>\n

\"iTunes<\/a><\/p>\n

Gmail Scam<\/strong><\/h2>\n

This Gmail scam is by far the most sophisticated phishing attack. It also starts with an email that urges readers to view an important document on Google Docs. Clicking the link will take them to a fake Google Docs login page.<\/p>\n

Recently, attackers used a Google Drive public folder to upload a fake Google Docs login page and then used Google Drive’s preview feature to get a publicly accessible URL to include in their messages. Because the page is hosted on Google’s server and is served over SSL, the page appears more convincing. After discovering the attack, Google has successfully removed the phishing pages, but the attackers are still using other vulnerable servers to upload the fake login page.<\/p>\n

It’s quite common to be prompted with a login page when accessing a Google Docs link, and many people may enter their credentials.<\/p>\n

\"Gmail<\/a><\/p>\n

An ounce of prevention is worth a pound of cure in dealing with phishing. We advise you to watch for such scams and their modus operandi. You can avoid phishing attacks by following these simple steps:<\/p>\n