Groupon and Payture.com - phishing scam in a new way
Hello!
Once again, looking through my email in the evening, I saw an interesting offer from Groupon and decided to use it.I am very wary of entering my payment details somewhere . I have never entered my payment details since I am paranoid. And the curiosity toli took up, I really decided on it, but I clicked on the payment by credit card and I was transferred to the following address:
I was expecting quite a nice page with fields for entering those same billing details.
Immediately struck by the logo of Alfa-Bank. And I decided to read more about the service, but I was transferred from the main page to the Alfa-Bank website. There were thoughts that this service could be their acquiring, and you can trust them - especially since I keep my accounts there.
')
Alarmed by the fact that the site has no contacts, offers, agreements, copyrights - no information at all. Looking at the whois of the domain, I discovered that the service is owned by Payture Ltd., registered in the offshore British Virgin Islands (a country with a population of 25,000 people :).
Alfa-Bank said that they did not own this service and that I enter the data at my own risk and peril. Of course, I did not take risks, closed the page and scored on Groupon's share. If they consider it normal to work with phishing services like this, then they went far away. Although there is a suspicion that Groupon may be involved in the creation of Payture.
It is very disappointing that companies of this magnitude allow themselves to behave this way and such carelessness still goes unpunished.
upd: what's interesting is that there is a PayTrue service (paytrue - payture), which also deals with payment processing. All this is strange.
Once again, looking through my email in the evening, I saw an interesting offer from Groupon and decided to use it.
https://secure.payture.com/apim/Pay?SessionId=[UUID]
I was expecting quite a nice page with fields for entering those same billing details.
Immediately struck by the logo of Alfa-Bank. And I decided to read more about the service, but I was transferred from the main page to the Alfa-Bank website. There were thoughts that this service could be their acquiring, and you can trust them - especially since I keep my accounts there.
')
Alarmed by the fact that the site has no contacts, offers, agreements, copyrights - no information at all. Looking at the whois of the domain, I discovered that the service is owned by Payture Ltd., registered in the offshore British Virgin Islands (a country with a population of 25,000 people :).
Alfa-Bank said that they did not own this service and that I enter the data at my own risk and peril. Of course, I did not take risks, closed the page and scored on Groupon's share. If they consider it normal to work with phishing services like this, then they went far away. Although there is a suspicion that Groupon may be involved in the creation of Payture.
It is very disappointing that companies of this magnitude allow themselves to behave this way and such carelessness still goes unpunished.
upd: what's interesting is that there is a PayTrue service (paytrue - payture), which also deals with payment processing. All this is strange.
Source: https://habr.com/ru/post/129586/
All Articles