Phishing: Targeting the two-factor authentication of Malaysian banks

In the past few days, we have been observing phishing spams targeting a host of Malaysian Banks under the garb of tax refunds. Although it is not new for the scammers to host one phishing site which provides a variety of choices for their intended victims.

The scammers have targeted the email systems of a well-known health organization in the US and by using an open proxy server accessed the OWA (Outlook Web Access) and logged on with the stolen credentials to send out spam emails.

The scammers are using a URL shortner so as to not raise any suspicions.
The phishing page has been designed to target as many Malaysian Online Banking users as possible.

All of us are aware that clicking on the individual bank links would show us the individual phish login pages, however, this time around the scammers/hackers have gone one step ahead and have been actively targeting the Two-factor Authentication Code (TAC). This entire phishing attack is done in real-time. The victims would provide their login credentials to the phishing site and the attackers would be logging on to the actual banking site.

Lately, banks are relying on the Two-factor Authentication and so are the scammers. The phishing site would present to its victims the TAC page, waiting for the actual bank to send the TAC to the victims and the victims, in turn, providing the TAC to the phishing site. This is one of the few phishing attacks which showcase the Man-in-The-Middle attack.

Indian Banks too have been implementing Two-Factor-Authentication for validating the online banking customers and coming few months we may observe criminals using the same tactics to targeting Indian Online Banking Customers.

eScan’s Smart filter, a heuristic filter detects these phishing attempts with ease and in the past too we have demonstrated its capabilities. Moreover, eScan’s Web Filter too detects these phishing pages and protects the users.

Advisory
• Check the URL
• Ensure that the banking Login Page is HTTPS enabled and it belongs to the said bank.
• Using a powerful Internet Suite, like eScan on your computer systems and for your Mobile Devices would significantly reduce the chances of you failing a victim to such phishing attacks.

For more information, visit www.escanav.com

eScan is an ISO (27001) certified pure-play enterprise security solution company with over 2 decades of expertise in developing IT security solutions. eScan today has a presence in 12 countries through its offices and subsidiaries. It also boasts of a robust channel partner network of more than 50, 000 partners spread across 190 countries worldwide. It is trusted by more than 6,500 enterprise and corporate users spread across various industry segments such as Government, BFSI, Education, Defense, Telecom, IT & ITeS, Infrastructure, Hospitality, and Healthcare worldwide.

It is powered by some of the latest and innovative technologies, such as Proactive Behavioral Analysis Engine (PBAE) Technology, MicroWorld Winsock Layer (MWL) Technology, Domain & IP Reputation Check (DIRC) Technology, Non-Intrusive Learning Pattern (NILP) Technology, and sophisticated Anti-Virus Heuristic Algorithms that not only provide protection from current threats, but also provides proactive protection against the ever-evolving cyber threats. eScan provides 24x7 free remote support facility to help its esteemed users to provide real-time solutions for security-related issues.

For more information, visit www.escanav.com

MicroWorld Technologies Inc.
39555 Orchard Hill Place
Suite 600
Novi, MI 48375

This release was published on openPR.