Recently a Electronic Arts server was used in attempts to trick users via phishing. The compromised server was used in phishing attempts relating to Apple ID and other information viable in identity theft. The server in question was hosting two websites from EA, they were purportedly running outdated software with widely known security issues.

The phishing site attempts to trick a victim into submitting his Apple ID and password. It then presents a second form which asks the victim to verify his full name, card number, expiration date, verification code, date of birth, phone number, mother's maiden name, plus other details that would be useful to a fraudster. After submitting these details, the victim is redirected to the legitimate Apple ID website.Netcraft

Posted: Mar 19, 2014 10:32 pm
Related Forum: PC General Forum