
One of the latest discovered online phishing scams was using the Google search page as cover and it lured users into giving away personal information by promising financial rewards.
The scam was discovered by the Websense security company and the face website which looked like the Google search page
was shut down 30 hours after being spotted.
The attack consisted in displaying a website that resembled Google and a banner announced the user that it had just won $400. Next, the "lucky winner" was directed to another page where he/she was supposed to provide personal information like credit card numbers, home address and phone number. As soon as this precious information was given to the fake website, the user was finally directed to the legitimate Google website. The phishing site was hosted in the U.S., Websense said.
This must be one of the simplest phishing schemes ever, very much different from strategies that involve sending trojans or keyloggers to discover personal information which can later be used to fraud users. It is surprising to see people still fall for such primitive schemes when there's so much information available about the malware and dangers lurking on the Internet.