Spammers, posing as insurers, use Heartbleed to phish for credentials

Share this article:

In a recently discovered phishing scheme, spammers, posing as a notable U.S. military insurance group, are asking users to log in and “register to the backup security certificates” in order to protect against potential Heartbleed bug attacks.

This is not a way of mitigating the Heartbleed bug threat.

Clicking the Sign On button at the bottom of the email will redirect users to a compromised Turkish manufacturing website, according to a Wednesday post by Symantec, which would not reveal the name of the insurance organization.

Additional giveaways to the phishing scam include poor use of the English language throughout the email, as well as the sender using an old mail client, which most modern businesses no longer use, according to the post.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

NIST finalizes cloud computing roadmap

NIST finalizes cloud computing roadmap

The NIST architecture is designed to accelerate the adoption of cloud computing.

Chinese MitM attack targets iCloud users

Chinese MitM attack targets iCloud users

The attack used a false certificate to trick iCloud users into handing over personal data and login credentials. With an attack of this size, some experts and researchers believe the ...

EPIC: driver data shared via V2V technology needs protection

The groups shared comments on V2V communications with the National Highway Traffic Safety Administration.