Amazon phishing attack collecting sensitive information
New phishing campaign has been reported over this week by Christopher Boyd from malwarebytes. Attackers are using a fake Amazon email claiming that by completing an online survey victim will win £10.
The Amazon phishing attack message includes the following:
As a valued customer we would like to present you with an opportunity to make a quick buck. We are offering £10 each to a selected number of customers in exchange for completing a quick survey relating to our service. Your opinions and thoughts are vital in order for us to provide the best possible service. Please press the link below to get started.
The phishing email is linking to a compromised website that asks user login credentials and payment information to process the prize. Looking at the website there is no SSL connection implemented and the domain name used is not amazon.
If you receive similar email make sure to verify the source and you can report the compromised website to the ISP hosting this service.