Here are some techniques that cybercriminals behind this scam have employed to trick users: Many companies also rely on Wix’s website building services to build their own websites, so receiving an email citing issues with their Wix account will naturally spark concern, motivating recipients to take action quickly. Well-known companies like Wix are popular targets for scammers to impersonate because they are trusted names with large customer bases. Please share this alert with your social media network to help us spread the word around this email scam. Whilst MailGuard is stopping this email scam from reaching Australian businesses, we encourage all users to be extra vigilant against this kind of email and whatever happens, do not open or click them. Once users provide all the required information, their credentials are harvested for later use, and users are redirected to the actual Wix website. This is actually a phishing page on a compromised website, registered with and hosted with an American hosting service.Īfter users ‘log in’ into their Wix accounts, they are led to several similar phishing pages, asking them for their credit card details, billing address and email username and password, as per the below:
However, the domain used in the URL of this page doesn’t belong to Wix. It directs users to log into their Wix accounts in order to proceed, asking them for their username and password. Unsuspecting recipients who click on the link are led to a login page employing the company’s logo and branding. A link is provided for users to update their payment details. It informs recipients that their subscription payment has been declined for ‘the fourth time’ and directs them to update their payment information, or risk getting their account cancelled. The email body contains a header stating ‘Your Wix Payment Method Has Been Declined’.
While the email body incorporates the company’s logo and branding, the domain used in the sender email address provided in the ‘From:’ field doesn’t belong to Wix – a red flag pointing to the email’s illegitimacy. Titled ‘Important Alert From Wix’, the malicious email uses a display name of ‘Support’. Popular website builder Wix is the subject of a phishing email scam intercepted by MailGuard.
0 kommentar(er)
