English
Romana
Home
|
Contact
|
Feedback
SEARCH
Security Development
Company
Careers
Press Center
Virus Info
Security News
Virus Glossary
About Malware
VDF History
External Links
Solutions
Products
Alerts Panel
Support
Register
Paypal 174 - Phishing
See also
Summary
Full description
Target:
Paypal
Date discovered:
24/09/2007
General
The goal is to get the following information:
• Credit card
• Personal data
• Paypal account
Phishing method:
• URL link
Email Details
From:
service@paypal.com
Subject:
PayPal Account® Posible Fraud - Notification !
Visible link:
https://www.paypal.com/cgi-bin/webscr?cmd=_login
Actual link:
http://www.pmr.in/images/logo4.jpg
IP address:
70.85.218.228
The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.
This screenshot is how the phishing email looks like:
Page Details
Visible URL:
http://217.19.238.74/~hans/www.paypal.com/cgi-bin/webscrcmd=_...
Actual URL:
http://217.19.238.74/~hans/www.paypal.com/cgi-bin/webscrcmd=_...
IP address:
217.19.238.74
The phishing page will look like the following:
See a brief description
here
.
Inserted by Dominik Auerbach on Mon, 24 Sep 2007 20:56 (GMT+1)
« Back
Print this page
Security News
Avira protects from PDF Exploit
Infected Firefox Add-on: Avira protects
HEUR/HTML.Malware
HTML/Infected.WebPage.Gen
HTML/Crypted.Gen
TR/Rootkit.Gen
W32/Sality.Y
Worm/Sohaned.BP
TR/Drop.Muha.462027
TR/Silentbanker.BA
TR/Dldr.Zitan.A
EXP/Pidief.axa
Download here
© 2010 Avira Soft SRL
Privacy
|
Site terms
|
Copyright
|
Site map