"We are making changes to the legal agreements," reads a message distributed to Walla Walla mail service users.
Photo: Getty Images
Did you receive a message in the e-mail box requiring you to enter credit information? You may have been the victim of a sting: In the
last day, a malicious message has been spread on the Walla!
Requires users to update account information and credit card number.
"We are making changes to our legal agreements that will apply to you. You must update your information," the statement said.
Clicking on the attached link leads to an unmistakable page - it is not Walla's in any way.
A sign of this can be found at the website: http://deltakitchens.in/is.
"This is an email phishing that aims to steal the e-mail account information of Walla users, and then also the credit card information of those users," says Lotem Finkelstein, director of the cyber intelligence department at Check Point.
"The site, as can be seen, does not belong to Walla, but is an Indian site that was hacked and the phishing pages are stored on it."
According to Finkelstein, attention should be paid to the language and wording, which although seen in normal Hebrew, still expresses a sense of urgency using the words "click", "start now", "start updating", which are meant to speed up the user to act soon.
"We would expect customer service to make a more polite request that explains the nature of the change or refers to the new terms of use of the site."
How will you protect yourself?
• URL - The site is not secure and no green lock can be found next to the address, which should turn on warning lights, as Walla secures its site.
Also the URL is not Walla's official address.
• Credit card information requirement - Legal changes do not require updating credit card information.
Pay attention to the details required of you and make sure it makes sense with an initial referral.
Also make sure that an official clearing service is used that secures the credit card information.
• The sense of urgency - Well-known companies understand that the user public takes several weeks to complete an update of details and therefore do not apply any sanctions before a number of alerts are given.
Therefore, if you are unsure, you can contact the company's official customer service, and ask for an explanation of the requirement.
It is important that the referral be to a telephone number or email address that is not specified in the suspect's application.
Walla responded:
"The phenomenon of phishing, which aims to deceive surfers and steal personal information from them, is the leader in the field of cybercrime. Leading giant companies such as Netflix, Facebook, DHL, PayPal and many others are a regular target for impersonation - the so-called Squatting Campaign "Recently, hackers launched a campaign impersonating the Walla! Mail service and requesting payment to continue using the account. Clarify: The Walla! Mail service is a free public e-mail service. We recommend deleting such messages permanently without clicking on their links."
