Name :	Other:HTML/Fraud
Detection Names :	Trojan-spy.html.fraud.gen
Category:	Malware
Type:	Other
Platform:	HTML

A malicious program which does not easily fit into any other malware category.

Other:HTML/Fraud detects fraudulent e-mail messages and website HTML.

Detections are typically the result of a mismatch in HREF tags used by hyperlinks. The fraudulent message or site is attempting to disguise or obfuscate the hyperlink. Disguised links are used by phishers attempting to lure victims to fraudulent sites in order to steal personal account details.


Example

Example of a HREF mismatch:



The HREF tag shown in the sample HTML code directs to "Phishing.com" while the displayed hyperlink will show "Online-Bank.com".

Displays Online-Bank.com:



But links to Phishing.com: