Targeted phishing for Amazon Credit Cards

This time, there is a phishing for Amazon Credit Cards, which are served by LBB Bank.

The user is redirected twice to some URLs, which are reported as “DECEPTIVE” by Chrome.

Unfortunately, the final pages were deleted, so I can’t take screenshots.

 

Hallo

Sie haben (1) wichtige Nachricht auf Ihrem Konto LandesBank Berlin AG.
Um es zu sehen, klicken Sie bitte auf den Link unten:

https://kreditkarten-banking.lbb.de/lbb/cas/dispatch.do?bt_PRELON=do&ref=1200_LBB&service=COS

Herzliche Grüße
Ihre Beraterin LandesBank Berlin AG


© Copyright 2018 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology


Interested in professional consulting on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.

Related Posts

PayPal is teaching fraudsters how to create the perfect phishing email

PayPal is sending a lot of emails these days, one of these got me confused. I am sure now it is a valid email, but the multitude of different links in it and the confusing information is making this email very suspicious.   Here is a summary of the email:   Ihre Meinung ist uns […]

Aggressive phishing against Strato.de customers

Strato.de (now belonging to 1&1) is one of the biggests hosters in Germany. Since a few weeks we see a lot of emails containing various texts that try to convince the user to login to his strato.de account and perform some actions. Strato published on their blog also a post about these fake emails: https://strato.de/blog/achtung-aktuell-wieder-phishing-mails-im-namen-von-strato-im-umlauf/ […]

Targeted Phishing: Your auth password for [ user@host.com ] expires today !

It’s been a while since I received a targeted phishing. This time it is on one of my email accounts hosted on Google, and strangely, their phishing filter did not catch this one.     ITNotification <ITNotices@mail.com>  sorin@mustaca.com Expiration Your Password for sorin@mustaca.com has expired today. You can change your Password or continue using current Access   KEEP PASSWORD  ->erased domain on geocities.com   sorin@mustaca.com Admin. 2023 […]