Spammers, posing as insurers, use Heartbleed to phish for credentials

Share this article:

In a recently discovered phishing scheme, spammers, posing as a notable U.S. military insurance group, are asking users to log in and “register to the backup security certificates” in order to protect against potential Heartbleed bug attacks.

This is not a way of mitigating the Heartbleed bug threat.

Clicking the Sign On button at the bottom of the email will redirect users to a compromised Turkish manufacturing website, according to a Wednesday post by Symantec, which would not reveal the name of the insurance organization.

Additional giveaways to the phishing scam include poor use of the English language throughout the email, as well as the sender using an old mail client, which most modern businesses no longer use, according to the post.

Share this article:

Sign up to our newsletters

More in News

Five schools earn NSA's excellence in cyber ops distinction

The schools earned NSA's Centers for Academic Excellence designation for their cyber offerings.

With RATs at their disposal, 419 scammers target businesses

With RATs at their disposal, 419 scammers target ...

A new report reveals how Nigeria's 419 scammers are spreading malware to pocket business funds.

InfoSec pros worried BYOD ushers in security exploits, survey says

InfoSec pros worried BYOD ushers in security exploits, ...

A study by the Information Security Community on LinkedIn found most organizations don't have proper polices and support for BYOD.