{"id":5823,"date":"2015-06-04T05:25:44","date_gmt":"2015-06-04T09:25:44","guid":{"rendered":"http:\/\/kasperskydaily.com\/uk\/?p=5823"},"modified":"2019-11-22T10:13:59","modified_gmt":"2019-11-22T10:13:59","slug":"multi-stage-phishing","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.uk\/blog\/multi-stage-phishing\/5823\/","title":{"rendered":"Multi-stage phishing that starts with real links"},"content":{"rendered":"

Recently Kaspersky Lab experts have found a shifty method that allows fraudsters steal personal information without access to user\u2019s login and password. The criminals don\u2019t try to steal the victim\u2019s credential \u2014 they act much smarter instead.<\/p>\n

Victims receive email letters with request to follow the link to an official service and enter a new password; otherwise their account would be blocked. Surprisingly, the link actually leads to the developer\u2019s website \u2014 for example, to the Windows Live website.<\/p>\n

\"image001\"<\/a><\/p>\n

After authorization the victim receives a request for a range of permissions from an unknown application. Among other this range can include automatic login, access to profile information, contact list and the list of e-mail addresses. By assigning these rights we open access to our personal information to cyber criminals.<\/p>\n

Then, unknown individuals secretly gather the information, presumably for fraudulent purposes. For example, they can use it to distribute spam or links leading to phishing or malicious sites<\/a>.<\/p>\n

How it works?<\/strong><\/p>\n

There is a useful but not perfectly secure protocol for authorization called OAuth, which allows users to open the limited access to their protected resources (contact lists, agenda and other personal information) without sharing their credentials. It is commonly used by applications for social networks if they need, e.g. access to users\u2019 contact lists.<\/p>\n

As apps for social networks also use OAuth, your Facebook account is not in safety as well<\/a>. A malicious app can use access to user\u2019s account to send spam and malicious files, as well as phishing links.<\/p>\n

\n

7 simple steps to avoiding Facebook #phishing<\/a> attempts \u2013 https:\/\/t.co\/Qj68bST6HQ<\/a> pic.twitter.com\/V6rinEa2jI<\/a><\/p>\n

\u2014 Kaspersky (@kaspersky) April 24, 2015<\/a><\/p><\/blockquote>\n