Security experts from Trend Micro have discovered a new interesting phishing attack targeting smartphones. The hackers behind this attack are not only content with stealing banking information, but also tricking their victims into giving them email passwords and copies of their police IDs.
At first glance, there doesn't seem to be anything special about this attack. A simple bank website displayed on browsers asks you to enter your username and password.
Once someone provides the data requested by the malicious website, they are taken to a second website that asks for their email address and password. This way, the hackers gain access to the victim's email, change the password, and so if the victim wants to change the password on their bank's website, they will not be able to confirm the change.
Finally, victims are taken to a third page that asks them to upload a copy of their ID (passport or driver's license).
A very far-fetched malicious attack, but unfortunately there are people who, out of ignorance and good faith, fall into the trap.
