English
Romana
Home
|
Contact
|
Feedback
SEARCH
Security Development
Company
Careers
Press Center
Virus Info
Security News
Virus Glossary
About Malware
VDF History
External Links
Solutions
Products
Alerts Panel
Support
Register
Paypal 189 - Phishing
See also
Summary
Full description
Target:
Paypal
Date discovered:
12/11/2007
General
The goal is to get the following information:
• Credit card
• Personal data
• Paypal account
Phishing method:
• URL link
Email Details
From:
limited@paypal-online.com
Subject:
Your PayPal account was limited !
Visible link:
https://www.paypal.com/cgi-bin/webscr?cmd=_resolution-center
Actual link:
http://www.ctx-00.evo-it.de/~ftp/login.online.PayPal.com/
IP address:
193.138.180.58
The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.
This screenshot is how the phishing email looks like:
Page Details
Visible URL:
http://www.ctx-00.evo-it.de/~ftp/login.online.PayPal.com/webscr.htm?...
Actual URL:
http://www.ctx-00.evo-it.de/~ftp/login.online.PayPal.com/webscr.htm?...
IP address:
193.138.180.58
The phishing page will look like the following:
See a brief description
here
.
Inserted by Dominik Auerbach on Mon, 12 Nov 2007 20:49 (GMT+1)
« Back
Print this page
Security News
Avira protects from PDF Exploit
Infected Firefox Add-on: Avira protects
HEUR/HTML.Malware
HTML/Infected.WebPage.Gen
HTML/Crypted.Gen
TR/Rootkit.Gen
W32/Sality.Y
Worm/Sohaned.BP
TR/Drop.Muha.462027
TR/Silentbanker.BA
TR/Dldr.Zitan.A
EXP/Pidief.axa
Download here
© 2010 Avira Soft SRL
Privacy
|
Site terms
|
Copyright
|
Site map