I guess every user with an email address has already received at least one email from a bank, financial website or other website asking him to download a security patch to avoid account termination or a ban. Those mails are so common nowadays that they seem to lack the desired affect and that less and less users are falling for those phishing emails that point to the download of a Trojan of course and not a security update.
The new kind of phishing emails is actually using the knowledge of those first gen phishing emails by warning users about those emails which will lead to a fake website. Since this is a relatively new scheme many users will probably fall for it believing the message that is send to them.
Who would believe that a message that is warning the user about phishing emails is actually a phishing email ? The best way to defend against this kind of attacks ? Never open links in mails, always visit the website directly.
Related posts:
Gmail And Yahoo Mail Users Now Protected Against eBay And PayPal Phishing MailsNew Phishing Emails Emerge
Phishing Explained
Free Phishing Protection with Delphish
Gmail Increases Email Security With Phishing Protection
Realtime Anti-Phishing Add-on for Firefox gone bad
Phishing Protection Tips
Test The Phishing Protection In Firefox
thanks for the heads up
Thanks for the heads up, right.
Never open links in emails when whatever authentication is required, never run attached data. Call by phone the institution, hoping that the line – like in “Mission: Impossible” – will not have been hijacked! (joke for the latter, but who knows what future reserves!)
proxy sites wouldnt be needed if we were not spied on at every turn. Some people don’t believe in a right to privacy