Media releases are provided as is by companies and have not been edited or checked for accuracy. Any queries should be directed to the company itself.

Symantec Threat Bulletin: Phishing Attacks on Social Networking Sites

Symantec announces new wave of targeted phishing attacks
  • 15 December, 2009 10:19

<p>Symantec Threat Bulletin: Phishing Attacks on Social Networking Sites</p>
<p>Over the past year, the popularity of applications on social networking websites has increased dramatically. This has led to a new wave of phishing attacks targeting the users of these applications, promoting attractive offers to lure potential victims. Symantec’s Security Response Team has been monitoring these attacks and has identified some of the applications the phishing sites are based on. These include:</p>
<p>1. Social networking on mobile – Due to the rise in the number of users accessing the Internet through smart phones, social networking websites have expanded their services on smart phones, including messaging, chatting, photo viewing, etc. This increase in users has opened more doors to attackers because there are now more potential victims. Hence, attackers have created phishing websites on social networking brands claiming to provide these services on smart phones.</p>
<p>2. Live chat – In November, Symantec observed that five percent of the targeted applications were on live chat, and among them adult sex chat was the most common target. The phishing attacks show fake offers of free sex chat to lure end users into entering confidential login credentials.</p>
<p>3. Blogging – Phishing websites that attacked blogging in social networking comprised 23 percent of all targeted applications. Various attractive blog topics are used in the login pages of the phishing site as a means of tricking end users. Pornographic material is one of the most common topics observed in these phishing attempts.</p>
<p>4. Gaming – In 2009, gaming has become an increasingly popular aspect of social networking. Symantec evaluated gaming and found that it comprised 13 percent of the targeted applications. Gaming applications in social networking generally require various kinds of credit points to progress to higher levels of the game. Some of these credit points typically require online payment. The phishing websites trick users by providing fake offers of free credit points on these gaming applications.</p>
<p>Symantec advises Internet users to follow best practices to avoid phishing attacks. Here are some basic tips:</p>
<p>• Do not click on suspicious links from emails.</p>
<p>• Check the URL of the website and make sure that it belongs to the brand.</p>
<p>• Type the domain name of your brand directly in your browser rather than following any link.</p>
<p>• Frequently update security software, such as Norton Internet Security 2010, which protects from online phishing.</p>
<p>Please let me know if you would like to speak with a Symantec security expert about this threat and what computer users can do to prevent falling victim to this attack.</p>
<p>Media Contact:</p>
<p>Almira Anthony</p>
<p>Max Australia</p>
<p>+61 2 9954 3492</p>

Most Popular

Editor's Recommendations

Solution Centres


View all events Submit your own security event

Latest Videos

  • 150x50

    CSO Webinar: Will your data protection strategy be enough when disaster strikes?

    Speakers: - Paul O’Connor, Engagement leader - Performance Audit Group, Victorian Auditor-General’s Office (VAGO) - Nigel Phair, Managing Director, Centre for Internet Safety - Joshua Stenhouse, Technical Evangelist, Zerto - Anthony Caruana, CSO MC & Moderator

    Play Video

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

More videos

Blog Posts

Media Release

More media release

Market Place