Volksbank 2 - Phishing

See also

Full description

Target:	Volksbank
Date discovered:	08/05/2006

General The goal is to get the following information:
    • Bank account
    • Personal data

Phishing method:
    • Image with link

Email Details From: custservice_ref_57576507181520@volksbank.de
Subject: Volksbanken Raiffeisenbanken informiert Sie

Visible link: http://www.volksbank.de/vrnetworld/c101335777777.nsf/XC701133.asp
Actual link: http://www.volksbank.de.vrnetworld.c10133577.dir99k2.biz/r1/vr/
IP address: 61.242.93.18

The email is designed to avoid detection from Antispam and Antiphishing. Such techniques are:
    • The Body contains invisible Text.
    • The Body of the email contains HTML content.
    • The Body of the email is a picture.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.volksbank.de.vrnetworld.c10133577.dir99k2.biz/r1/vr/
Actual URL: http://www.volksbank.de.vrnetworld.c10133577.dir99k2.biz/r1/vr/
IP address: 61.242.93.18

The phishing page will look like the following:

See a brief description here.

Inserted by Dominik Auerbach on Mon, 08 May 2006 16:23 (GMT+1)
Updated by Dominik Auerbach on Sat, 24 Nov 2007 21:19 (GMT+1)

« Back

Volksbank 2 - Phishing

Security News