Caught in the payment fraud net: when, not if?

Watch out for “Amazoon” Phishing

Be warned that there are some typo happy phishers looking out for login credentials. It’s time to take a trip down the Amazoon:

Amazoon mail

It reads:

Verify your Amazoon account

Dear Amazon user,

We need to confirm your account information,

you must confirm your amazon account before we close it.

Click the link below to confirm your account information using our secure server.

Clicking the “Manage” link will take victims to a page asking for username and password information:

Login page

After this, they’re faced with a page asking for personal information (name, address, phone number and so on):

Personal info

The page after this one is broken – looks like the host has taken it down mid-blog so hopefully nobody else will be scammed by this one. Typically the pattern for this kind of thing would be login details, personal information then card data. While we can’t say for sure what lay in wait at step 3, we can say to be on your guard for any more emails from “Amazoon” and never hand over personal data such as card details in response to emails you’ve been sent.

Christopher Boyd (Thanks to Aaron for sending over)

ABOUT THE AUTHOR

Christopher Boyd

Former Director of Research at FaceTime Security Labs. He has a very particular set of skills. Skills that make him a nightmare for threats like you.