Over the past period, security experts have identified a number of malicious campaigns that leverage football-related events to trick users into visiting their cleverly set up websites.Symantec experts have come across a couple of new phishing sites that use the names of football players and other major events such as the 2014 FIFA World Cup.
In the first scheme, victims are promised all sorts of prizes, including trips to the World Cup. When signing up for the offer, users are asked to provide information such as credit card numbers, electronic signature, card holder name, password, email address, and email address password.
In the end, they’re presented with a “winning code.” However, as always, no one wins anything, except for the crooks who harvest large amounts of sensitive information.
In a second example, the phishing site replicates the one of a Brazilian payment card operator. The phishers are using a picture of celebrity football player Neymar da Silva to make everything more convincing.
Internauts are promised all sorts of prizes if they make purchases worth $30 (23 EUR). For this, they have to provide their name, phone number, city, father’s name, and a special CPF code that’s related to taxes.