Security experts are warning of a new "widespread" phishing scheme that attempts to dupe users of Google's email service, Gmail, into offering account details in exchange for a bogus cash prize.
The emails, which claim to be sent from Gmail.com staff, tell recipients they are among a dozen winners picked to receive $500, according to security firm Sophos. To receive the payment, the individuals must click on a link, which directs them a Tripod-hosted website that appears to be a legitimate Gmail page.
Once they arrive at the site, victims are told they must register for "Gmail games" by entering in either their e-gold, PayPal, StormPay or moneybookers account information and paying an $8.60 membership fee.
"Of course, this email wasn't really sent by the folks at Gmail, and the $500 cash prize doesn't exist," said Graham Cluley, senior technology consultant for Sophos. "Anyone tempted to try and collect it is in danger of walking straight into a trap set by these fraudsters. People need to learn that there is no such thing as a free lunch, and to be much more wary of unsolicited email communications whoever they may appear to come from."
Continue at source ...
News source:
SC Magazine