Paypal 171 - Phishing

See also

Summary Full description

Target: Paypal Date discovered: 30/08/2007  General  The goal is to get the following information:     • Credit card     • Personal data     • Paypal account Phishing methods:     • URL link     • 'text' link  Email Details  From: accounts@paypal.us Subject: Notification from Billing Department Visible link: https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run Actual link: http://www.dforce.sk/sitemap/cgi-bin/webscrcmd=_login-run/update.php IP address: 62.176.161.22 The email is designed to avoid detection from Antispam and Antiphishing. The technique is:     • The Body of the email contains HTML content. This screenshot is how the phishing email looks like:  Page Details  Visible URL: http://www.dforce.sk/sitemap/cgi-bin/webscrcmd=_login-run/update.php Actual URL: http://www.dforce.sk/sitemap/cgi-bin/webscrcmd=_login-run/update.php IP address: 62.176.161.22 The phishing page will look like the following: See a brief description here. Inserted by Dominik Auerbach on Thu, 30 Aug 2007 19:59 (GMT+1)

« Back