More sophisticated cyber attacks expected during Cricket World Cup

Cybercriminals are targeting the cricket crazy fans during India's favorite sporting event with more sophisticated malicious attacks and fake offers to steal their money and personal information.

At a time when cricket stadiums around the subcontinent are running full and tickets for most matches selling like hot cakes, many fans are looking for other alternatives to experience the matches live and the web experts expect more sophisticated spam and phishing attacks related to the 2011 Cricket World Cup.

There were many spams and phishing attacks targeting cricket events in the past such as the Indian Premier League and T20 World Cup. Symantec Probe Network has detected many such attacks with one of them being a message inviting users to attend the final game of the World Cup 2011 in Mumbai. The invite offers multiple executive club facilities like a private table, a gourmet champagne brunch, and many more, for 10 guests. This may sound like an attractive deal; however, it is simply bait for cricket fans keen experience the thrill of the World Cup Final. Back in June, one phishing site spoofed a legitimate social networking site, claiming that entering login details would give users a chance to obtain free tickets.

The company also warns that during the course of the tournament, spam attacks will contain attachments that intend to distribute malware using fake video files purportedly showing highlights of the games. Users are advised to refrain from clicking mails that offers tickets and opening attachments unless they are from authorized or official sources. The offers like these entice users to join the 2011 World Cup games where spammer is the only winner.

To prevent cybercriminals and to be safe from such attacks, Symantec gives certain tips such as:
1. Don't respond to emails that offer you attractive and free deals, unless you are confident that the offer is from an authentic source and well-known brand.
2. Never respond to emails that announce prizes you supposedly won in sweepstakes and other competitions you never participated in.
3. Never give out your personal information and bank account credentials in response to any mail.
4. Don't open suspicious emails or attachments.
5. Use an up-to-date security solution, legitimate and paid security solution.
6. Do not click on suspicious links in email messages.