Share

Related Links

Top 5 Stories

News

Aussie bank customers hit by advanced phishing techniques

03 June 2009

Customers of the Commonwealth Bank in Australia are being targeted by a new breed of phishers, who seem intent on scamming them out of their e-banking and payment card details.

Reports from Australia suggest that some of the phishers are using highly advanced scamming techniques to extract the data - including asking email recipients to phone into an automated 'call centre' and
so allay the fears of even the most tech-savvy of internet users.

The phishers also appear to have rediscovered the art of using images, rather than text, to bypass anti-phishing/spamming software.

Interestingly, Infosecurity notes that some of the phishers are reportedly using a pixel-shifting technique to ensure that different emails have different images, so avoiding pattern analysis security software.

The Commonwealth Bank says it is working with the Australian Federal Police's High Tech Crime Centre to track down the phishers, although the scammers appear to be using anonymiser services to hide their IP trails.

The surge in phishing attacks also appears to have been going on for some time in Australia, with the Australian Payments Clearing Association reporting a 33% increase in phishing volumes in 2008 compared to 2007.

What is interesting about the phishing emails is that, as well as rotating images and email addresses, the scammers are using different text within the image to escape detection.

The text asks recipients to contact an automated call centre in order to unlock an account, activate a card, claim a fee refund, update internet banking details, view an important security message or complete a survey in exchange for payment.

The final step in the rotational process is the use of multiple landing pages with users clicking on the links in the mail and being taken to pages that either infect them (with different viruses) or a landing page requesting details of their account(s).

Judging from reports on several Australian security forums, the phishing techniques used by the scammers are highly sophisticated and represent a seachange in the way phishers operate, Infosecurity notes.

This article is featured in:
Data Loss  • Internet and Network Security • Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.