I've recently been victim to a scam. I was signed up to an internet gaming 'club' despite never knowingly having visited their site, read their T&C's nor clicked an agreement.
Under UK regulation such services are required to send you a text message to tell you about your membership. I ignored this as was not aware of my 'sign-up', believing it to be phishing/spam. This natural psychological reaction helps aid the scammer. I ignored it to my cost as several months later I noticed the additional anonymous charges on my mobile account.
To my amazement I looked back at my browsing history months later and discovered that I had in fact accessed their website, twice, in quick succession, but without my knowledge and without seeing any content. The first click had the description of the site I had knowingly visited (some blog page), but the address of somewhere completely different.
Now I can imagine how I might have clicked on a banner or pop-up who's true purpose was disguised, but how have I unknowingly accessed their web pages THREE times with such a large space of time between the last two visits?
Clearly these guys also had access to my mobile phone number, presumably 'kindly' exposed by my mobile ISP (thanks guys!), along with who my ISP was. This gave them UNFETTERED ACCESS TO CHARGE ME VIA PREMIUM SERVICES! (and thus exposing the carrier to accusations of money laundering ...)
Any idea how they might have pulled this off?
How did the attacker piggyback on the 3rd party blog site? How might they be distributing their attack?
What can the 3rd party site do to protect themselves and how can the browser be improved to block such an attack?
(PS phone is an iPhone, as you might imagine, and browser is Safari) (PPS judging by the mobile ISP's user forums, this technique has netted victims over at least 3 years, costing the ISP goodness knows how much in customer service complaints etc., there's a real economic impact to this one!)