Phishing

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Mar 06, 2013 6:12 am

These phishing attempts really kill me!

Quote:

Dear Yahoo User,

It has come to our notice that there has been several complains on identity theft, We have upgraded the security on all Yahoo accounts.
You are advised to update your account within 24Hours.
CLICK HERE TO SECURE AND UPDATE YOUR ACCOUNT.

Failure to update now might cause account suspensions.

Yahoo! Case number: 1655199YH

Sad thing is some people really fall for this.

Posted: Wed Mar 06, 2013 9:01 am

Being on the front line of this in my RL job, it makes me so sad to see this more and more often.

And most of the time the phishing sites are hacked genuine sites where the owners have no idea. It's really important for abuse departments of the host, and of the presumably hacked email to get these reports as soon as possible. I bet that would require a full time job for someone who gets the amount of spam that crosses our inbox daily.

I don't care if I get 50 abuse reports about the same site, I'd rather that than a phishing site be left on our networks.

Posted: Wed Mar 06, 2013 9:35 am

I've noticed more of these lately.

I fire off a few made up usernames and logins to lower moral, then report the email (if it isn't spoofed), and contact the form hosts. Most fake login pages get closed fairly quickly.

Posted: Wed Mar 06, 2013 12:33 pm

^ This is most likely me being thick (not as technically/internet/computer savvy as I would like) - but how do you know that the made up usernames and logins don't coincide with another person's actual user and login?

Posted: Wed Mar 06, 2013 12:45 pm

^ One way could be to make the mail provider non-existant. Like @yohoho.com, @gmill.com, @hatmail.com etc. Wink

Posted: Wed Mar 06, 2013 1:37 pm

Cougar wrote:

but how do you know that the made up usernames and logins don't coincide with another person's actual user and login?

I don't. But the chances of me plucking a working name and pw out of thin air would be staggering. Cool

They are usually fairly long and Embarassed

so it's highly unlikely.

Posted: Wed Mar 06, 2013 1:46 pm

You could even use a nonexistent TLD, such as mrilu.jb.

Posted: Wed Mar 06, 2013 8:51 pm

I use

http://www.phishtank.com/index.php

or

http://www.google.com/safebrowsing/report_phish/

to report them.

Baiting Guru Joined: 03 May 2007 Posts: 18313

There's a great anti phishing site here: http://www.antiphishing.org
I usually report to them, as well as the company being impersonated.

Baiting Guru Joined: 03 May 2007 Posts: 18313

And . . . speaking of phishing, this one I just got is pretty funny. (though it's more likely malware).

Quote:

You??™ve just ordered pizza from our site

Pizza Pepperoni Lover's with extras:
- Italian Sausage
- Beef
- Black Olives
- Black Olives
- No Cheese
- Extra Sauce
Pizza Spicy Sicilian with extras:
- Bacon Pieces
- Pineapple
- Onions
- Extra Cheese
- No Sauce
Pizza Super Supreme with extras:
- Italian Sausage
- Jalapenos
- Onions
- Easy On Cheese
- Extra Sauce
Pizza Hawaiian Luau with extras:
- Ham
- Diced Tomatoes
- Green Peppers
- Diced Tomatoes
- Easy On Cheese
- Extra Sauce
Drinks
- Gold Peak Tea x 4
- Coca-Cola x 4
- Hancock x 3
- Limonade x 5
- Pepsi x 5
- 7up x 5
Total to pay: 202.62$

If you haven??™t made the order and it??™s a fraud case, please follow the link and cancel the order.
CANCEL ORDER NOW!

If you don??™t do that shortly, the order will be confirmed and delivered to you.

With Best Wishes

TERENZIO`s Pizzeria

Please Note that they have a trademark on double question marks.

Posted: Wed Mar 06, 2013 10:03 pm

I used to respond to phishing attempts with fake info, until my computer totally crashed. The techs at the local repair shop said my machine was totally overwhelmed with malware that bypassed my antivirus software. I've since learned that phishing sites very commonly have malware scripts running, so even clicking a link can be dangerous.

Now I run No-Script as a Firefox add-on and have a paid version of Malwarebytes running in the background at all times. Those have blocked more malware attempts than I can count. And I stopped playing with phishing links.

Bottom line: be careful.

Posted: Thu Mar 07, 2013 12:29 pm

^ No script is a must for my work computer. And I have been a "blind link clicker" in the past, and got rewarded with getting my computer completely flooded with all sorts of nasties.