This website has been active for little while now. The Banking section is a list of bank links in no order or proper capitalization. The transaction number is the same every time regardless of data entered. The forum requests the name, phone number, state, city, email, amount of refund requested, purpose of refund, bank name, and whether the bank account is a checking or savings account. This is not how Amazon would acquire user data. Meanwhile, the Refund page is a Google Forum. This is a sign the attacker may want to gain access to your computer. This includes TeamViewer, AnyDesk, and RemotePC. All the programs listed are for remote access capabilities. The Support page requests users to connect via a third-party application instead of through Amazon. Yes, you are correct Sir! You are one smart cookie. How did you get to this page? And why do you think it has someone else’s name? Could this site be possibly….a Phish?!?! “But hey, why am I seeing this page when all I ordered was a yo-yo?” – John Doe Regardless of the information the victim entered it, resulting page was for an Apple iPhone 11 to be delivered to Williams Mark. If you don’t have beyond excellent eyesight to read the data entered in the field below, then here is the information entered: the first name with ‘Sam’, last name with ‘ShammyPants’, the email with ‘ ’, a fake phone number, and a fake tracking number. If you fill in the information on the Track My Order page it will bring you to the same output page. The bottom section of the page where you would go for the About Us section is an image as well (not clickable). Moreover, the ‘Amazon.in’ and the Indian flag are visible near the search bar, which conflicts with it being a United States website. At the top of the page the search bar is not interactive but instead only an image. The URL ends with ‘.us’ instead of ‘.com’ which is not expected of a United States Amazon website. It was using HTTP when using Amazon you would expect to see an HTTPS secure symbol. There are many reasons to consider this site suspicious. The site hosted four pages: Track My Order, Support, Refund, and Banking. So, props to them for continual improvement. When WatchGuard first discovered the site on it did not have a Banking section.
The domain trackmyorderus was associated with this site but is no longer active. The domain amazonfindorderus is active as of today. What is not simple is navigating the minefield of shipping notification Phishing attacks that can threaten your computer security, or put your banking credentials in jeopardy. Here’s an example of one Phishing scheme taking place right now… Baddies want to get hold of your Personally Identifiable Information (PII) and if possible, compromise the security of your computer. Wait! Unfortunately, that is not the complete process. “Wow, purchasing seems so easy! I’ll follow these simple steps and go purchase that yo-yo that I’ve been really wanting” – John Doe Though this may not feel like a step, the seemingly simple process of tracking and receiving your order can be an opportunity for Phishing. There is one final step: Receive the package.
This process is all it takes to purchase gifts this holiday season. Find an online store you trust, pick an item with reliable reviews, enter your payment details and/or sign-in to the websites account, and finally, click ‘Purchase’.
0 kommentar(er)
