«
»

“Webmail Quota” Phishing

We’re seeing renewed activity in attempted Webmail identity theft Phishing emails. The current campaign attempts to get your attention by stating that you’re over your allowed storage limit. A typical example:

Subject:      Your Webmail Quota Has Exceeded The Set Quota

Your Webmail Quota Has Exceeded The Set Quota/Limit Which Is 20GB.

You Are Currently Running On 23GB Due To Hidden Files And Folder On Your Mailbox.

Please Click the Link Below To Validate Your Mailbox And Increase Your Quota.

Click here: http://icebrrg.com/Public/ViewForm.aspx?formID=47626

Alternatively copy and paste the link on your browser.
Failure To Click This Link And Validate Your Quota May Result In Loss Of Important Information In Your Mailbox/Or Cause Limited Access To It.

Thanks
HELP DESK

Users that follow the link are provided with a decent looking form asking them to validate their email username/password. Doing so will then enable the spammer to access your email account for the purpose of sending more spam, and committing additional fraud.

This campaign appears to be relatively successful as many of the samples we’ve reviewed have come from apparently legitimate email accounts already hijacked by the spammers, likely with the same Phish.

Related posts:

  1. New Phishing Email Accuses You Of Sending Spam
  2. New and Aggressive “Settings File” Phishing Campaign
  3. Fidelity Phishing Alert
  4. AOL’s New AIM Instant Messenger Phishing Scam
  5. Facebook Phishing Catches Many

Tags: , ,

This entry was posted on Tuesday, February 9th, 2010 at 10:15 am and is filed under Phishing Lessons. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to ““Webmail Quota” Phishing”

  1. bubik says:
    May 13, 2010 at 9:02 am

    I was wondering, if I only typed my details but did not submit the form (since i realized a second before i sent it that it is a scam) would the spammer still got my details?
    thanks!

  2. Bruce Yager says:
    May 13, 2010 at 10:08 am

    Sending the contents of a form without it being submitted, while possible, is very unlikely. You don’t need to worry about that. There is something you should worry about though: If you visited the site hosting the form it’s quite possible that it planted some kind of malware on your machine.

    You might want to try scanning with one of these:

    http://www.malwarebytes.org/
    http://free.avg.com/us-en/homepage

    Both of the programs linked above have good free versions. Some particularly nasty viruses can prevent their installation though. If that happens you should consult a competent professional about having any viruses removed.

  3. bubik says:
    May 13, 2010 at 12:35 pm

    thanks!! this is very helpful! :-)

Feel free to respond but please read our Comment Policy first.