Series of phishing attacks aimed at stealing Gmail and Yahoo user log-in information is on rise. I believe that the attacks were a part of a larger campaign aimed at stealing user data and compromise computer systems.
If the users put the Login details on such phishing links, then the information get transferred to the attackers. With the information in hand, the attacker can log in to the account to change certain settings that allow them to monitor all outgoing mail. The Gmail attackers entered the email address that they control under the “forwarding and delegation settings,” which allows them to send and receive email messages without having to ever log back into the accounts.
Our team came across few links which are carrying out the phishing attacks on Gmail and Yahoo mail.
On further analysis of the phishing link: hxxp://consciousliving.me/gmail.html. We noticed that the domain consciousliving.me is specially be using for carried out the phishing attacks.
This domain has many others phishing pages related to Gmail, Yahoo, Facebook etc. Attackers may be also updating this domain for more phishing pages to carry out more attacks on other online services.
Quick Heal takes care of such attacks and blocks such phishing pages to protect its users.
Leave a reply