Another Orkut phishing Scam using Google Docs

I am not actively maintaining my Orkut profile, but still keeping  because few years back Orkut was a revolution in India and it has helped me to search out my lost friends – Yes a kinda obligation. Recently Orkut has revamped the style and features to compete with Facebook.  Not going to that part. Now the issue is something else.

Today I got an Orkut Scrap from one of my  friends . This was her  message.

HELLO FRIENDS,PLEASE CHECK THE LINK BELOW TO SEE MY GIRLFRIEND’S PICTURES
INSERT UR ID AND PASSWORD AND SEE THE PICTURES !!

See the same in Orkut Scrap Book

It is very ridiculous that these type of fishing attacks are still alive. This time a small difference, the smart hacker has used google docs and created a form to steal  user ids and passwords of the victims. After clicking the link a form will be opened to enter user id and password. The form is created with Google Docs that’s also in SSL.

If your user id and password , nothing will be happened , accept a Thank You message from the smart hacker . Now your response (User id and password) is recorded and in a safe custody

Now What to Do?

If you have accidentally entered your email id and password or you are the sender of such phishing scraps, then Immediately

• Change your Orkut password and password reset questions
• Check and remove the  installed malicious Orkut Applications if any.