Ham-fisted phishing attack seeks LinkedIn logins

Symantec has spotted an uptick in phishing emails over the last week that purport to come from LinkedIn support and attempt to steal users’ account credentials.

The emails warn potential victims of “irregular activities” on their account and say a compulsory security update is required. The emails include an HTML attachment that purports to be a form for performing the update.

The HTML file is actually a copy of LinkedIn’s website and login page, wrote Satnam Narang, senior security response manager with Symantec, in a blog post. But the website code in the file has been modified, so if a user logs in, their account credentials are sent to the attackers.

To read this article in full or to leave a comment, please click here