Google KYC

AndyPix

I had a look at the link in a throw-away virtual environment ..
Its a standard phishing site set up to clone the google account verification page ..

It invites you to fill this in :-




Any details you plug in here will just be given to the senders of the phishing mail ..

kwikbreaks

I hope you admitted to being Beelzebub residing in Hades with your mothers maiden name being Mrs. Goat

AndyPix

kwikbreaks wrote: »

I hope you admitted to being Beelzebub residing in Hades with your mothers maiden name being Mrs. Goat

Hehe - it was a bit more sweary than that :rotfl:

agrinnall

What is the postcode for Hades, I can't seem to find it in the Royal Mail look up?

Yolina

agrinnall wrote: »

What is the postcode for Hades, I can't seem to find it in the Royal Mail look up?

That's because it's a special format: H666

AndyPix

agrinnall wrote: »

what is the postcode for hades, i can't seem to find it in the royal mail look up?

dev 1l .

pollypenny

persian_star wrote: »

Just to say, maybe it's a coincidence about being a TT customer, but although the extent of the 'sensitive' information (bank details, passwords, etc) wasn't as great as thought, the hackers still got their hands on a very large list of active email addresses.

I am another TT customer who has received this email from googlekyc (I have a gmail account as well as TT, but at no point have I given or have they ever asked for my bank details!!!) - of course I googled it to see whether other people were affected and found this thread

If anyone else gets this or other similar emails, ALWAYS check to see if it's true before clicking any links, even if it looks like it might be legit!

In case anyone is wondering, this is the title and body of the email (with my details xx'ed out):

Google Services Account Verification

Google Account [EMAIL="xxxx@talktalk.net"]xxxx@talktalk.net[/EMAIL],
Support Ticket Reference: LW-119O8
Date: 05 - November - 2015

***IMPORTANT*** Please print this page for your records.

Your Google ID [EMAIL="xxxx@talktalk.net"]xxxx@talktalk.net[/EMAIL] appears to have inaccurate or
invalid billing details and is at risk of being terminated from all Google
services unless your details are updated within the next 48 hours.

It's important that we are able to positively identity our users to comply
with both regulatory requirements and to help ensure the security of
accounts. We call this process Know Your Customer (KYC).

To update your Google ID and validate your details, please click the
following link:

http://googlekycs.org/login/?email=xxxx@talktalk.net

If clicking the link above does not work, copy and paste the URL in a new
browser window instead.

Sincerely,
The Google Accounts Team

Note: This email address cannot accept replies. To fix an issue or learn
more about your account, visit our help center:
https://support.google.com/accounts/

Yep!

Just like that! I googled ' know your customer' and discovered that the wording is used legitimately, but I knew damn well this wasn't so.

They was a old comedy, just shown in Wales where one character had the catch phrase, ' They must think people are folk!'

Well, most folk are not so foolish as these scammers think.

AndyPix

pollypenny wrote: »

Well, most folk are not so foolish as these scammers think.

The thing is , SOME people are ..
And really, you don't have to be THAT thick to fall for this as it is all quite polished ..

The scammers know that most people wont fall for it, but think about it this way ..

For a small outlay, I can get my phishing email send out to 10 million email addresses .
If just 1% of the people receive it, click on it - that is 100,000 hits !!

Now, if just 1% of the people that click on it, actually fall for it and fill it in, then that is 1000 realtime card details harvested - from the press of a button ..

So lets say the scammers manage to rinse on average £500 from each compromised card account, then they gain HALF A MILLION POUNDS !! :eek:

As you can see - it may seem silly, but it is very profitable - and my estimates of the amount of "hits" is very conservative I think ..

Andy

twiglet98

I've had the same phishing email and have never been a TT customer.

pollypenny

twiglet98 wrote: »

I've had the same phishing email and have never been a TT customer.

Ironically, that's a relief as it suggests no relation to the TT leak.