Phishing - from bad to worse
April 13th, 2005 at 09:39pm
As usual, I got this email at my hotmail account saying that I have message from another eBay member. Even though I knew that this was “one more” of those phishing mails, just out of curiosity I opened the mail. The mail was one of the most authentic looking mails!. Anyway, the reason why I am writing this here is, this particular phishing attack is the new variant and is one the the smartest one that I have seen. No doubt that the phishers are using newer and newer techniques to fool the users.
On clicking the button provided in the mail (Yes. no link., but a graphic button), I was taken to a site which look like the original eBay site. Check the screen shot given below (click to enlarge).
What is new here is, this site has a DHTML layer with a proper E-Bay URL (text). For some reasons, the placement DHTML layer is not very proper in my case or else, it would have perfectly placed over the actual URL.
Also, if you look at the enlarged image, it also tries to convince the user that this is a true eBay site by giving some “Account Protection Tips”
So, keep a watch next time you come across something like this!
Entry Filed under: Net
3 Comments Add your own
1. JD | April 13th, 2005 at 11:36 pm
It’s not that DHTML is not perfect. You can never display something outside ‘viewport’ of your browser. It’s just spammer’s attempt to disguise people who might have address bar turned off or addressbar moved to location other than default.
JD
2. Harsh | April 14th, 2005 at 12:55 am
Another problem in MIE, i have the impression that this is not present in 6.0, what have you used.
3. Arjun | April 14th, 2005 at 1:47 pm
Correct JD!
Harsh:
I used MSIE 6, with win sp2!
The above trick did not work on Firefox!
I normally use firefox. I logged on to MSN messenger, and so, ended up opening the hotmail page using IE!
Leave a Comment
Trackback |