I have been receiving messages from relatives that goes like this:
AirAsia is rewarding everyone with 2 free plane tickets to celebrate 24 Years of quality service. Get your free ticket at: http://airasîa.com/free-tickets/ .
which is a unicode link to http://xn--airasa-fwa.com/free-tickets/
I am just really curious how a click on this link on phone could allow hackers to hijack my friends and relatives Whatsapp accounts? Trying to access this site on PC gives me a 404 error.
In the mean time I have asked those who sent me this message to use Whatsapp settings to log out from all computer sessions. Is that enough?
There was a link like this:
<a href="whatsapp://send?text=*AirAsia is rewarding everyone with 2 free plane tickets* to celebrate 24 Years of quality service. Get your free ticket at : http://airasîa.com/free-tickets/ .">
So I suppose that's why I am receiving those messages.
But I still can't figure out the intent of this phishing. Maybe it has something to do with this?
What does it actually do?
Found out the phishing site actually tries to redirect users to
final.html under the same
Google search on onclasrv returns bunch of adware related results. I'm guessing that is the final intention then?