Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Credit Card Re-Verification Phishing


  • Please log in to reply
1 reply to this topic

#1 FrontalLobotomy

FrontalLobotomy

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:55 AM

Posted 10 December 2012 - 05:48 PM

Hi all.

This is a phishing technique I had not run across before. I've only found one reference to it in an afternoon of google searching (http://ficoforums.myfico.com/t5/forums/forumtopicprintpage/board-id/creditcard/message-id/366867/print-single-message/false/page/1)

My user went to pay a credit card bill at discover card. He went direct; not responding to an email or any type of link. Soon after logging in he got a pop-up wanting verification of his SSN, CC#, CCV, etc. He was able to repeat the scam with three browsers (IE, Chrome, Firefox). (personal computer does not have this behavior) The company anti-virus is TrendMicro, so we kicked off a full scan and we'll see what the results are.

Assuming TrendMicro can't clean this (since it got past the real-time scanner), I wanted to get an idea of what this could be and the best approach to clean it up.

Thanks.

Windows 7 x64
TrendMicro WFBS
IE/Chrome/Firefox

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:55 AM

Posted 10 December 2012 - 10:29 PM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here.If you get crashes in normal mode,run it in safemode with networking

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users