New AOL Phishing Campaign in the Wild

[Peaches]

New AOL Phishing Campaign in the Wild

Users tricked into exposing their billing and personal information

Security researchers warn of a new phishing campaign targeting AOL users. Rogue emails claim that users need to update their personal and billing information in order to continue receiving services.

Sophos reports that these phishing emails are sent to everyone, but are particularly tailored to AOL paying customers. The messages read:

"Dear AOL Member,

We were unable to process your most recent payment. Did you recently changed your bank, phone number or credit card ?

To ensure that your service is not interrupted, please update your billing information today by following this steps,

1. Visit http://bill.aol.com

2. Enter all your information

3. Click Submit to update your billing information

PS: The link in this massage will be expire within 24 Hours . You have to update your payment information.

Sincerely, AOL Member Services"

The http://bill.aol.com link actually points to a fake website hosted on a domain previously associated with other phishing schemes. Further investigation by Sophos researchers of the IP addresses and WHOIS information used in this attack, revealed a different scam abusing Amazon's affiliate payment system.

story here: http://news.softpedi...ld-147284.shtml