Near a million Orkut user accounts hacked by eluring users for free mobile recharge. Hackers this time used the psychology of human behaviour of getting free money. Thousand of users were targeted with this technique and since it plays delicate with exploiting the greed for money for users.
Mode Of attack:
Users were given a link which has title saying recharge you mobile for free and get a free credit of 500.When a user clicks the link ,it lands up in Hacker (Spoof page) where user is again asked to put relevant details which include Orkut username and password. Once the user completes the process the information will be passed to hackers. Once got access of user account, hacker emulates the same messages and sends to all other users who is linked with them and the chain carries on.
Steps to get protected from hackers/phish:
Never use any Java code which says copy paste in browser even if it’s from your friends or known ones. Unknowing you may be doing a hack for the hackers (Pasting the codes in browsers is also know as Code Injection as form of Hacking and its illegal too)
- Never give away your personal details to any such sites which offer free things, nothing in this world is free, if some one offers ask first to yourself then the giver about the reason behind the act.
- Check your login page/login address. Hackers can show you fraud pages with as same as original pages but if you give a little time to verify you can very well know ,its not a rocket science.
- Never give you personal details (Account names, email ,financial details) to any sites without checking their “Privacy Policy”
I love it