A webserver hosted on the Telkom network, has been breached and used to host a phishing site. Urlscan lists the site as naphotography.co.za with three levels of file systems as shown below. Cyber criminals do this to hide phishing sites.
Naphotography.co.za / 83de / journal / citi
Urlscan.io has confirmed that the domain had been comprised and used for phishing. Harvesting information from victims is used by cyber criminals to steal personal information, like banking logins. If your login details are compromised and your bank account is accessed, your bank will not take any responsibility for the loss.
The page appeared to be a prefect replica of Citi Bank, visiting the domain gives you a warning from your browser (see image below), but you can proceed to the page. “Citibank is the consumer division of financial services multinational Citigroup. Citibank was founded in 1812 as the City Bank of New York, and later became First National City Bank of New York.”
Amended: By 17.57 the page appeared to have been removed.
Read Our Articles on Phishing
Phishing attacks on Gmail users
