Kaspersky researchers have identified a growth in the usage of cunning spam and phishing delivery technique. Malicious internet users are increasingly exploiting registration, subscription, and feedback forms on websites to insert spam content or phishing links into confirmation emails from respected and trustworthy companies on a global scale.

 

Malicious users are constantly looking for new methods to deliver their spam and phishing messages to recipients, while bypassing existing content filters. Ideally, they try to make letters come from a legitimate source with a good reputation so that users cannot ignore the unwanted email. This also creates a challenge for companies as this unwanted spam or even malicious content, seemingly sent on their behalf, could compromise their customers’ trust or even lead to personal data leaks.

 

The method is quite simple and effective. Today, almost every company is interested in receiving feedback from their clients to improve the quality of service, customer retention, and reputation. To do this, companies ask customers to register a personal account, subscribe to newsletters or communicate with feedback forms on the website, for example, to ask questions or leave suggestions. These are exactly the mechanisms that attackers are exploiting.

 

All three mechanisms require the customers’ name and email address, so they can receive a confirmation email or feedback. According to Kaspersky researchers, scammers are adding spam content and phishing links into this mail. They simply add the victim’s email address into the registration or subscription form and type their message instead of the name. The website will then send a modified confirmation letter to that address, containing an advertisement or phishing link at the beginning of the text instead of the recipient’s name.

 

“Most of these modified letters are linked to online surveys designed to obtain personal data from visitors. Notifications from a reliable source usually pass through content filters with ease, as they are official messages from a reputable company. This is why this new method of unwanted, yet seemingly innocent, spam emailing is so effective and worrying,” notes Maria Vergelis, security expert at Kaspersky.


 

To keep companies from possible reputational losses, we advise:

  • To check how the feedback forms work on your website
  • To embed several verification rules that would cause an error when trying to register a name with inappropriate symbols
  • To conduct a vulnerability assessment of the website, if possible.

 

Read the full text of the report on Kaspersky Daily.


RECOMMENDED ARTICLE FOR TECHWORLD


 
Kaspersky Lab Challenges Whitehats to Find Flaws of IoT Devices in Global Competition
Techworld Date Posted: 25 October 2018 1:49 PM | 261 Views
Kaspersky Lab is inviting ethical hackers, known as whitehats, from across the world to test the security of smart devices and industrial systems as it launches its fourth international industrial Capture the Flag (CTF).... See More
 
Kaspersky Lab Challenges Whitehats to Find Flaws of IoT Devices in Global Competition
Techworld Date Posted: 1:49 PM | 261 Views
Kaspersky Lab is inviting ethical hackers, known as whitehats, from across the world to test the security of smart devices and industrial systems as it launches its fourth international industrial Capture the Flag (CTF)...See More

 
ADATA Launches the IM2S3164, an Industrial-Grade 3D NAND SSD
Techworld Date Posted: 28 February 2019 2:34 PM | 73 Views
ADATA Technology a leading manufacturer of high-performance DRAM modules, NAND Flash products, and mobile accessories has launched the IM2S3164 industrial-grade SATA III solid-state drive.. See More
 
ADATA Launches the IM2S3164, an Industrial-Grade 3D NAND SSD
Techworld Date Posted: 2:34 PM | 73 Views
ADATA Technology a leading manufacturer of high-performance DRAM modules, NAND Flash products, and mobile accessories has launched the IM2S3164 industrial-grade SATA III solid-state drive.See More

Frank Emmanuel Trazo
Steam Greenlight: An End of a Chaotic Era
All About Gaming • By: Frank Emmanuel Trazo | Date Posted: 6 September 2017 9:34 AM | 99 Views
On June 6, 2017, Valve decided to discontinue Steam Greenlight. After suspending the submission of new games, they had more than 3400 games that were pending in Steam Greenlight. Some titles weren't granted approval.... See More
Frank Emmanuel Trazo
Steam Greenlight: An End of a Chaotic Era
All About Gaming • By: Frank Emmanuel Trazo | Date Posted: 9:34 AM | 99 Views
On June 6, 2017, Valve decided to discontinue Steam Greenlight. After suspending the submission of new games, they had more than 3400 games that were pending in Steam Greenlight. Some titles weren't granted approval...See More

PC Buyers Guide
Kids Appetite for Online Retails Sites Grows Threefold, Amid Shift in Browsing Behavior
Techworld • By: PC Buyers Guide | Date Posted: 19 June 2019 11:41 AM | 91 Views
Kids Appetite for Online Retails Sites Grows Threefold, Amid Shift in Browsing Behavior. See More
PC Buyers Guide
Kids Appetite for Online Retails Sites Grows Threefold, Amid Shift in Browsing Behavior
Techworld • By: PC Buyers Guide | Date Posted: 11:41 AM | 91 Views
Kids Appetite for Online Retails Sites Grows Threefold, Amid Shift in Browsing BehaviorSee More

 
Personal Devices at Work
Techworld Date Posted: 15 August 2019 9:27 AM | 227 Views
Personal Devices at Work. See More
 
Personal Devices at Work
Techworld Date Posted: 9:27 AM | 227 Views
Personal Devices at WorkSee More

 
WATCH: A 19-year Old Student Builds a Power Bank That Can Power Appliances On-the-Go
Techworld Date Posted: 27 March 2018 2:38 PM | 792 Views
We rely heavily on our gadgets these days. Almost everyone has a power bank for those times when you don’t have access to a power source to charge your phone. . See More
 
WATCH: A 19-year Old Student Builds a Power Bank That Can Power Appliances On-the-Go
Techworld Date Posted: 2:38 PM | 792 Views
We rely heavily on our gadgets these days. Almost everyone has a power bank for those times when you don’t have access to a power source to charge your phone. See More

 
Nokia 3310 Celebrates 18th Birthday with Price Blowout
Techworld Date Posted: 31 August 2018 4:58 PM | 284 Views
HMD Global, the home of Nokia phones, celebrates years of reliable mobile experience with Nokia 3310’s 18th birthday on September 1.. See More
 
Nokia 3310 Celebrates 18th Birthday with Price Blowout
Techworld Date Posted: 4:58 PM | 284 Views
HMD Global, the home of Nokia phones, celebrates years of reliable mobile experience with Nokia 3310’s 18th birthday on September 1.See More

 
Transcend Provides a Full Range of Solutions for Upgrading Mac Computers
Techworld Date Posted: 29 November 2017 4:36 PM | 378 Views
Transcend Information, a worldwide leader in storage and multimedia products, is proud to a full range of Apple solutions for upgrading Mac computers.. See More
 
Transcend Provides a Full Range of Solutions for Upgrading Mac Computers
Techworld Date Posted: 4:36 PM | 378 Views
Transcend Information, a worldwide leader in storage and multimedia products, is proud to a full range of Apple solutions for upgrading Mac computers.See More

 
Choose the Right External Storage for Your Needs
Techworld Date Posted: 26 June 2019 9:00 AM | 80 Views
Choose the Right External Storage for Your Needs. See More
 
Choose the Right External Storage for Your Needs
Techworld Date Posted: 9:00 AM | 80 Views
Choose the Right External Storage for Your NeedsSee More

 
Nokia 8: Three Firsts in One Precision Ddesigned Flagship
Techworld Date Posted: 17 August 2017 11:37 AM | 363 Views
HMD Global, the home of Nokia phones, today announced the Nokia 8, a high performance, beautifully crafted smartphone, designed with content creators in mind. The Nokia 8 brings three world-firsts to Android smartphones, including.... See More
 
Nokia 8: Three Firsts in One Precision Ddesigned Flagship
Techworld Date Posted: 11:37 AM | 363 Views
HMD Global, the home of Nokia phones, today announced the Nokia 8, a high performance, beautifully crafted smartphone, designed with content creators in mind. The Nokia 8 brings three world-firsts to Android smartphones, including...See More


Power by

Download Free AZ | Free Wordpress Themes