Printed from http://www.electronista.com

EA server used in Apple ID phishing scam, claims security firm

updated 02:40 pm EDT, Wed March 19, 2014

Compromised EA server used to collect Apple IDs, personal information

A web server owned by game publisher Electronic Arts has been compromised and used in a phishing attack against users of Apple services, a security firm has claimed. The server, apparently used to host a calendar under the ea.com domain, is said to be used to try and acquire the Apple ID credentials of potential victims by posing as an account verification site.

The site in question attempts to trick the viewer into signing in to verify their Apple ID and password, according to Netcraft. The Internet security firm alleges the phishing site then asks for more personal information to confirm the victim's identity, including their full name, credit card details, date of birth, phone number, mother's maiden name, and other related sensitive information. Completing this second form takes the victim to a genuine Apple ID site, in an attempt to cover their tracks.

Screenshot of Apple ID phishing page on EA domain
Screenshot of Apple ID phishing page on EA domain


It is believed the server was infiltrated via a vulnerability in WebCalendar 1.2.0, software which was first issued in 2008 but has since received a number of security-related updates. This could have allowed the attacker to install scripts to the server, as well as access to other data stored on the server itself.

In a statement to the BBC, EA said "Privacy and security are of the utmost importance to us, and we are currently investigating this report."



By Electronista Staff
toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

ActvContent Sync Smartband

Smartbands of all sorts are hitting the market. Some build on the buzz around fitness trackers, while others offer simpler features fo ...

RocketStor 6324L Thunderbolt 2 eSATA bridge

Like it or not, the shift to Thunderbolt is underway. The connection is extremely flexible, allowing for video and data to co-habitate ...

Patriot Stellar Boost XT 64GB USB 3.0 drive

A vast selection of USB memory sticks means that consumers can often find exactly the size drive they need in a configuration that can ...

Sponsor

toggle

Most Commented

 
toggle

Popular News