Hosting services under attack

Powered by SC Magazine
 

Phishing attack aims for site credentials.

A new phishing attack is targeting webmasters in an attempt to gain access to site credentials.

According to security firm Trusteer, the attack targets cPanel, a popular management tool for web hosts.

The attackers have sent out emails claiming to originate from the hosting firms.

The emails tell the user that due to maintenance activities all FTP credentials must be updated. The message contains a link to a phishing site which asks for log-in information.

Researchers say that the attack is meant as an attempt to harvest FTP logins for webmasters. Once the logins have been collected, the accounts are then accessed and the sites used to host phishing pages targeting users of online banking sites and other financial services.

Trusteer chief technology officer Amit Klein said that the tie-in to bank phishing was of particular interest and could signal a dangerous new trend in the way online fraud operations are run.

"The ability to upload arbitrary content into relatively small and less popular sites may seem un-interesting fraud-wise. However, evidence we have collected over the past few months connects cPanel-driven sites to online banking fraud," said Klein.

"By stealing cPanel login credentials, criminals do not need to use hacking tools to upload content to a website, and therefore can avoid detection until after they have siphoned funds from consumer and business banking accounts."

Copyright ©v3.co.uk


Hosting services under attack
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1037

Vote