English
Romana
Home
|
Contact
|
Feedback
SEARCH
Security Development
Company
Careers
Press Center
Virus Info
Security News
Virus Glossary
About Malware
VDF History
External Links
Solutions
Products
Alerts Panel
Support
Register
Paypal 178 - Phishing
See also
Summary
Full description
Target:
Paypal
Date discovered:
02/10/2007
General
The goal is to get the following information:
• Bank account
• Credit card
• Personal data
• Paypal account
Phishing method:
• Image with link
Email Details
From:
customerservice@paypal.com
Subject:
Account Data Confirmation!
Actual link:
http://217.15.82.231/~eleve/.cgi-bin/webscrcmd=_login-run/webscrcmd...
IP address:
217.15.82.231
The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.
This screenshot is how the phishing email looks like:
Page Details
Visible URL:
http://217.15.82.231/~eleve/.cgi-bin/webscrcmd=_login-run/webscrcmd...
Actual URL:
http://217.15.82.231/~eleve/.cgi-bin/webscrcmd=_login-run/webscrcmd...
IP address:
217.15.82.231
The phishing page will look like the following:
See a brief description
here
.
Inserted by Dominik Auerbach on Thu, 04 Oct 2007 18:38 (GMT+1)
« Back
Print this page
Security News
Infected Firefox Add-on: Avira protects
Fake anti-virus solutions imitate Avira
HEUR/HTML.Malware
HTML/Infected.WebPage.Gen
HTML/Crypted.Gen
TR/Rootkit.Gen
W32/Sality.Y
TR/Silentbanker.BA
TR/Dldr.Zitan.A
EXP/Pidief.axa
TR/Click.Yabector.A.29
Worm/Palevo.kmq
Download here
© 2010 Avira Soft SRL
Privacy
|
Site terms
|
Copyright
|
Site map