Phishers replicate the genuine site to trick users into handing over their details

Dec 5, 2012 10:05 GMT  ·  By

Over the past period, a large number of Internet users have turned to the services of Liberty Reserve, a major Costa Rica-based payment processor. This popularity also attracted the attention of cybercriminals.

One phishing scam that targets Liberty Reserve customers starts with an email entitled “Liberty Reserve Account Status Update.”

“Dear Customer, We detected irregular activities on your Liberty Reserve account. Your Liberty Reserve account has been temporarily suspended for your protection, you must verify this activity before you can continue using your Liberty Reserve account. To restore your account and verify your account activity, Kindly click on the secure link below,” the emails read.

As expected, the link doesn’t point to a legitimate Liberty Reserve domain, but to a malicious website cleverly set up by the phishers.

Victims are asked to provide their account numbers, passwords, login PINs, and master keys.

In order to make everything more legitimate-looking, all the links on the site point to the genuine Liberty Reserve domain. However, the submitted details get stored in a database controlled by the attackers.

Internauts are advised to be on the lookout for such scams. Remember that the operations performed on the genuine Liberty Reserve site are protected by a secure https connection.