NEWS FROM THE LAB - Monday, July 25, 2011

F-Secure / Bellsouth Phishing Posted by Mikko @ 14:06 GMT

We were tipped by an alert user (thanks Walt) about this phishing scam targeting F-Secure and Bellsouth.

The fake e-mail used in the attack looks like this:

Ronnieandhattie: Dear Bellsouth Account User,<br /><br />Your e-mail needs to be updated with our released F-Secure <br />Internet Security 2011 new version of a better resource <br />webmail spam and viruses. If you have not upgraded your <br />account, click reply and fill in the columns below to send it <br />back so we can update our database account immediately.<br /><br />Failure to update will process your Bellsouth account <br />being temporarily blocked or suspended from our network and <br />may not be able to receive or send e-mail due to the update.<br /><br />Fill the column below:<br /><br />USERNAME:<br />PASSWORD:<br />Phone:<br /><br />We apologize for the inconvenience, we are here to make it <br />look better webmail in 2011.<br /><br />Bellsouth Customer Care!<br />Case Number: 7650087 Property<br />Account Security<br />�2011 Bellsouth All Right Reserved.

Please disregard such obvious phishing emails and delete them. Similar attacks have been targeting other operators and other antivirus companies as well.