Are phishers getting more technically proficient?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Jan 12, 2007 8:02 pm

Today my OH had a phishing email to his paypal email address with his full name in the email. Even I had to look twice (confirmed phish by paypal). We changed passwords etc, but they are getting quite scarily realistic Shocked

I think that even I (six months ago) might have fallen for it.
The 'log in' address is paypal.com-frg.info. Luckily my site killing knowledge came in handy - com-frg.info was registered yesterday for one year. Sneaky bastards!

** SUSPENDED ** Joined: 26 Mar 2005 Posts: 1267

I don't know what the script is, but there is something out there that shows your first and last name (as entered on the email account) when sent to your email box. I've had it happen plenty of time with other spam, but as I always do, I ignore it.

The only spam that caught me was when they put something like Re: Hi or something, but I know better now Very Happy

.

Posted: Fri Jan 12, 2007 11:54 pm

Quote:

Are phishers getting more technically proficient?

Probably, but there's no need: the dumbwits that fall for phishing emails aren't getting smarter. Confused

** SUSPENDED ** Joined: 26 Mar 2005 Posts: 1267

Quote:

the dumbwits that fall for phishing emails

stop including yourself in posts!

*HIDES FAST!*

Posted: Sat Jan 13, 2007 12:02 am

** SUSPENDED ** Joined: 26 Mar 2005 Posts: 1267

YOU WISH!!! You'll never be able to whip me.

You and your sick dominatrix fantasies

Posted: Sat Jan 13, 2007 12:57 am

keep in mind Radden: KD doesn't need to apply for a visa to get ya!

Posted: Sat Jan 13, 2007 1:46 am

It doesn't matter. A beginner's kit is now available.

http://www.theregister.co.uk/2007/01/12/phishing_kit/

Posted: Sat Jan 13, 2007 8:35 pm

I used to reply to some of these phish mails by putting phrases like F*%K OFF SCAM MER! in the space they wanted me to enter my CC number. A year ago most of these sites would take my rubbish but now they usually check for a number in a valid range. You don't suppose that maybe it was a legitimate site. Wink

Elite Baiter Joined: 02 Jul 2006 Posts: 1702

phishing is supposed to be detected by IE 7

So i decided to test if it really does any such thing - 1 email (known spoof from whoever sends the phising ones - lads normally send an email few days later the phishing ones arrive, i think and dont quote me im totally unsure but lads may sell each other lists of working emails?) anyway i entered the "Report a phishing site to the link micrsoft give" then gave it a full few days re-opned me spam and clicked the link in IE7

guess what - Nothing it opened as a page not found on this server (removed by host) so could be why ie7 didnt do whatever ie7 is supposed to do.

So ive done it again tried 45 mins later and got the page - 1 call to microsoft explains why - users may use the report to cause disruption to genuine business there microsoft manually check first, in 9/10 cases when we report them the host will remove them you can always contact the bank/police etc who will also take action

MY findings - IE7 anti phishing is not going to protect many people!

Are phishers getting more technically proficient?	View next topic View previous topic