Celebrity lures continue in the world of phishing. We have seen several phishing sites in the past that used altered celebrity images to get users’ attention. Today, we have a couple of examples in which phishers continued their celebrity promotion campaigns with glamour models Martisha and Denise Milani. These phishing sites are typically developed for the purpose of stealing personal information from a large number of these celebrities’ fans.
In one campaign, the phishing page spoofed Facebook’s branding and contained an image of glamour model Martisha along with a message in the Arabic language. This message translates to “Chat with Arab boys and girls on Facebook”. The phishing site gave the impression that the user could get involved in adult chats when they entered their login credentials. In reality, after the user inputted their login credentials, they were redirected to the legitimate Facebook login page while their information was sent to the phishers. The phishing site was hosted on servers based in Damietta, Egypt.
Figure 1: Phishing site with image of Martisha
In another campaign, the phishing site also mimicked Facebook’s appearance in order to obtain user login credentials. The background image contained a photograph of Denise Milani from a previous modeling photo shoot. The phishing site’s appearance suggested that the user could gain access to adult material when they entered their login credentials. However, as with the previous phishing campaign, once the user submitted their login credentials, they were redirected to the legitimate Facebook login page. This phishing site was hosted through a free Web hosting service. If the user became a victim to these campaigns, the phishers would have successfully stolen their information for identity theft purposes.
Figure 2: Phishing site with image of Denise Milani
Symantec advises users to follow these best practices to avoid becoming victims of phishing attacks.