phishing

I'm betting that most of our readers are fairly savvy Internet users who know what a phishing email looks like. You know how it goes, you get an email from PayPal saying that they're about to close your account unless you "click this link" right now. Something just smells, well, fishy. But we've been getting scattered reports from iPhone users that scammers are actually calling to phish for information.

This is just a friendly warning to make sure everyone's aware of the threat. Read on to hear from a reader who actually received a scam call.

Security researcher Aviv Raff claims that the iPhone and iPod touch versions of Mail and Safari are both vulnerable to a URL Spoofing vulnerability that could allow attackers to conduct phishing attacks to iPhone users. According to Raff, a hacker could create a specially crafted URL that, when sent via an email, he could convince came from a trusted domain like a bank, PayPal, a social network, etc. Then, when clicked and opened in Safari, the URL showed in Safari's URL bar would still appear to the victim that it is from the trusted domain.