Symantec Blogs: Security ResponseSyndicate content

Joji Hamada | November 3rd, 2009
0 comments

Recently, I've been seeing phishing attacks using Web forms attached to emails making the rounds again. This type of phishing isn't so common but is used on occasion, so I want to take this opportunity to remind everyone not to fall for this trick.

Common phishing attacks include emails purporting to be from legitimate entities like financial instituions, auction sites, and SNS sites which include links to Web sites set up by the attacker to steal user information.

In this case, however, the phishing site arrives as an email attachment rather than a link to the site included in the body of the email.

Here is what one of the emails looks like:

outlook.png

And the attached HTML file looks like this:

attachment.png

When the form is filled...