I published the following diary on isc.sans.edu: “Show me Your Clipboard Data!“:
Thanks to one of our readers who submitted this interesting piece of phishing. Personally, I was not aware of this technique which is interesting to bypass common anti-spam filter and reputation systems. The idea is to create a fake survey on a well-known online service. In this case, the attacker used surveygizmo.com which offers you to build an online presence for surveys or feedback forms. Most of these websites are paid services but offer free trials. Enough to build a phishing campaign… [Read more]