We are currently observing an attack with different phishing emails and websites, targeting the customers of the Italian bank Cartasi.

We have spotted 4 different phishing attacks, 3 of them using the classical technique of faking the target URL (pictures 1-3) and one using social engineering techniques (Picture 4). The last one, is tempting the user to access his/her account in order to receive a 150 EUR fidelity bonus. So that the effect is realistic, the sense of urgency is created by mentioning the email that the account has to be accessed in 48 hours from receiving the email.

All emails we received are being sent from bots around the world, containing also some fake headers.

As usual, we would like to assure our readers that nothing is really free in the Internet and that banks (should) never send emails asking the users to do something that could identify them. The emails are all detected by Avira Antispam as Phishing and all URLs are blocked.

Sorin Mustaca
Data Security Expert

Full story: Avira – TechBlog

• Phishing Attack on PayPal Italy
  We are monitoring a phishing attack directed toward the customers of PayPal Italy. The email is very long and explains the reader why is it important to click on that link and to answer to the survey....
• Phishing Attack Uses Fake Donation Website
  Earlier today, we found a phishing site that poses as a donation site to raise money for the victims of the recent earthquake in Japan. The phishing site http://www.japan{BLOCKED}.com is created by us...
• UK foreign secretary: “We’re under attack”
  Yesterday, the UK foreign secretary, William Hague, explained to a security conference in Munich how cyber criminals were trying to infiltrate the UK government and defense contractors. According to ...
• Inside a phishing attack: 35 credit cards in 5 hours
  Phishing attacks have grown steadily in recent years, becoming a highly profitable attack for cyber criminals. In ESET Latin America’s Laboratory, we are used to finding and informing about phi...
• Phishing Attack Targets Merchant Accounts
  The point of many phishing scams is to gain access to bank or credit account information for financial gain. So, it makes sense to target users or accounts with the highest odds of containing substant...
• Indian opposition party says its web site under attack
  India's political battlefield has moved online, with the main opposition party, Bharatiya Janata Party (BJP), claiming on Monday that its main website at www.bjp.org may be under attack. View full ...
• Twitter under attack by ‘mouseover bug’ (AFP)
  AFP - Twitter came under attack on Tuesday as hackers exploited a security flaw to wreak havoc on the microblogging service. View full post on Yahoo! News: Security News...
• Facebook Under Cyber Attack
  www.comodointernetsecurity.com Internet security insider visionary Melih Abdulhayoglu explains the underlying reasons why Facebook and other social networking sites hav...
• Phishing Attack Offering Fake Premier League Tickets
  After executing a variety of notorious activities targeting the FIFA World Cup, spammers have shifted their focus slightly to target another popular soccer/football topic. Symantec has observed a spam...
• US Bank phishing attack exposed
  On March 28, 2007, spammers sent thousands of emails that appeared to come from US Bank. These emails were actually examples of "phishing," an attack designed to make y...