Yandex Postcards: Beware of phishing!
Do not fall for the next fishing rod scam. Just received a letter with the following content:
Hello, a postcard has been sent to your name. Postcard sender: Postcards@Yandex.ru You can view the postcard within 90 days by the link cards.yandex.ru/card.html?cd=00dcfed993b461be466bcca05114e17f Click on it to get to the page with the postcard.
- In order to timely learn about the upcoming holidays, birthdays and contests, subscribe to the newsletter. Postcards@Yandex.Ru - cards for all occasions!
When clicking on the first link, the Yandex-passport authorization page opens. I have already started entering a password, as I noticed that the address bar says yandexpochta.freehostia.com/passport.htm . This is phishing, the purpose of which is to collect your logins and passwords. But the page was an exact copy of the original one and only by chance I did not give my login and password to the attackers. After half a minute, Kaspersky worked, and the virus also appears on the page. So, if you do not have an antivirus, then do not go to the above link .
The letter was sent allegedly with cards@yandex.ru, and did not fall into the spam folder (I have a box on Yandex). Be careful! Always see the exact address of the page, sometimes it may differ by only 1-2 letters.
')
I wrote about this on Yandex support - let them figure it out. Phishing page, as I understand it, is located on a free foreign hosting. However, the letter was sent through one of the masterhost servers.
Hello, a postcard has been sent to your name. Postcard sender: Postcards@Yandex.ru You can view the postcard within 90 days by the link cards.yandex.ru/card.html?cd=00dcfed993b461be466bcca05114e17f Click on it to get to the page with the postcard.
- In order to timely learn about the upcoming holidays, birthdays and contests, subscribe to the newsletter. Postcards@Yandex.Ru - cards for all occasions!
When clicking on the first link, the Yandex-passport authorization page opens. I have already started entering a password, as I noticed that the address bar says yandexpochta.freehostia.com/passport.htm . This is phishing, the purpose of which is to collect your logins and passwords. But the page was an exact copy of the original one and only by chance I did not give my login and password to the attackers. After half a minute, Kaspersky worked, and the virus also appears on the page. So, if you do not have an antivirus, then do not go to the above link .
The letter was sent allegedly with cards@yandex.ru, and did not fall into the spam folder (I have a box on Yandex). Be careful! Always see the exact address of the page, sometimes it may differ by only 1-2 letters.
')
I wrote about this on Yandex support - let them figure it out. Phishing page, as I understand it, is located on a free foreign hosting. However, the letter was sent through one of the masterhost servers.
Source: https://habr.com/ru/post/41648/
All Articles