Crooks try to steal victim's mobile account credentials

Oct 9, 2014 00:19 GMT  ·  By

Emails purporting to be notifications of a new message from various services are constantly used by online crooks, and in a new campaign they try to lure in victims by using the Vodafone mobile carrier brand.

If aimed at the right audience, the fake messages could make plenty of victims since Vodafone has millions of subscribers, and many of them keep the voice message service activated.

The bait is simple, as the email claims to inform of an unread message available on the online account for the carrier and provides a link to access it.

Obviously, the URL points to a fraudulent log-in page that impersonates the original website; all information entered in the text boxes, which includes the username and password, is automatically sent to the crooks, though.

The general recommendation for notification emails asking to log into a web account is to do it by manually inputting the address in the web browser and avoid clicking on the provided link.

According to online sources, this campaign sends out thousands of emails, in an attempt to steal credentials and personal information from Vodafone users. This data can be used for other malicious activities that could end in financial losses or identity theft.