Warning out vs bogus online Christmas loans, credit extensions

Online Christmas shoppers were warned this week against falling for online scams offering bogus Christmas loans and credit extensions. The only thing to be gained from such online holiday offers would be malware that can steal the victim's personal data, the HotForSecurity blog said. "If you are 'short on cash this holiday,' there’s a scammer to let you know that 'eHoliday cash' can give you the extra money you need 'to make Christmas Merry.' Just click a link," it said. But clicking on the link would take the victim to pages hosting the BlackHole exploit kit, it warned. The page hosting the exploit kit is based in Russia and has been blocked by Google's Safe Browsing tool for malicious activity, it noted. But it added that while the link might be blocked, the Christmas campaigns are at their peak and there is "no guarantee the next malicious link won’t dodge security software blacklists or reputation-based mechanisms." Personalized letter from Santa HotForSecurity also warned of a separate scam campaign targeting parents who want to send their children “a personalized letter from Santa.” Once they click on the inserted link, they are made to fill out an online survey that can allegedly help them win an iPhone or an iPad. Users are also asked to give away their phone number and send an SMS to a premium-rate number, it added. "Bottom line, no one will ever get any personalized item from or with Santa for their child. In fact, none of the on-line questionnaires or the aggressive ads that follow have anything to do with Christmas or Santa," it added. Online threats Meanwhile, HotForSecurity also warned against bogus announcements claiming users’ “wire transfer was cancelled by the bank.” The link takes them to another webpage known with a bad reputation. HotForSecurity drew up a list of things users should keep in mind around Christmas shopping seasons: