New Scam in Town

Quote:

---

Phishers have added a new lure to their tackle boxes: e-mails that ask people to fax sensitive information to bogus security investigators.

In a new scam, attackers are sending e-mail warnings that appear to come from PayPal, security specialist Sophos said Wednesday. These e-mails say that someone tried to reset the recipient's password and asks him or her to participate in an investigation.

The e-mails direct people to a Microsoft Word document hosted on a Web site and urges them to download the form, fill it out, and fax it to a toll-free number, Sophos said. The form asks for credit card information.

---

http://news.zdnet.com/2100-1009_22-5828551.html
New scam asks people to fax away data | Tech News on ZDNet

New dance step, same old tune. I would act incredulous at the phishers belief that this would work...but obviously it DOES, or they wouldn't bother. :shocked:

Hi Eg~

As Cluley Said, it really looks dump to use a toll-free fax number, which can be traced easily.
The article did not report any realy life example and cases, and whether the attacker has been traced or arrested nor they failed to catch them?

Quote:

---

The authorities can easily track the phone number. But what isn't clear is whether they will get a (toll-free) number and then quickly dump it, or (whether they've) acquired the number using a false ID, or can have the calls transferred to a satellite phone somewhere outside of America."

---

Is this a contradiction with the intro, or it is just my rolled eyes and drunkman's thoughts??

Quote:

---

The e-mails direct people to a Microsoft Word document hosted on a Web site and urges them to download the form, fill it out, and fax it to a toll-free number, Sophos said. The form asks for credit card information.

---

Black Cluster :)