New twist on phishing

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Not quite a Newb Joined: 04 Jun 2008 Posts: 74

Never saw this approach before:

Sent following email:

Quote:

For security reasons we have sent you this message as an attachment file.
This measure has been adopted to prevent personal information theft and
data loss. Please do not reply to this e-mail. Mail sent to this address
cannot be answered. For assistance, log in to your PayPal account and
choose the "Help" link in the footer of any page. To receive email
notifications in plain text instead of HTML,update your preferences.
------------------------------------------
Barclays Bank PLC. Registered in England. Registered No: 1026167.
Registered Office: 1 Churchill Place, London, E14 5HP.

Headers:

Quote:

Received: from mx3.mailshield.co.uk ([217.77.187.17])
by vanguard.titaninternet.co.uk (Merak 7.5.2) with ESMTP id GNG39351
for <[email protected]>; Thu, 27 Nov 2008 15:08:46 -0000
Return-Path: [email protected]
X-Envelope-From: [email protected]
X-Envelope-To: [email protected]
Received: From mail.c-mti.com (69.224.246.200) by
mx3.mailshield.co.uk (MAILFOUNDRY) id 19amsryTEd2GLAAw for
[email protected]; Thu, 27 Nov 2008 14:58:26 -0000 (GMT)
Received: from User [129.10.156.203] by www.c-mti.com with ESMTP
(SMTPD-10.02) id A7A70FA0; Thu, 27 Nov 2008 07:07:19 -0800
From: "Barclays"<[email protected]>
Subject: New e-banking security notice - Read carefully!
Date: Thu, 27 Nov 2008 10:07:27 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0066_01C2A9A6.4D79E07E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <200811270707571.SM01980@User>

The attached file is some basic HTML displaying the Barclays logo saying the account email address was changed, please clicky here. Link redirects to:
http://221.4.205.130/user/barclays/index.htm

Okay, so the email goes wrong immediately by mentioning PayPal Rolling Eyes

but first time I've seen an attached HTML file to phish.

Killing these things is not my area of expertise, so feel free to help yourselves.

Posted: Thu Nov 27, 2008 3:52 pm

Good you pay attention Thumbs up

Quote:

Killing these things is not my area of expertise, so feel free to help yourselves

So?? Here is your chance to learn a bit that will help you through your whole baiting career Wink

It's extremely simple to do all it takes is about half an hour and you'll never doubt a website again. Give it a try, lots of help available at decent rates Laughing

Posted: Thu Nov 27, 2008 3:59 pm

Hello TheBarSteward2,

We don't deal with phishing emails here. However, feel free to report it here:
http://www.castlecops.com/pirt

Not quite a Newb Joined: 14 Jul 2005 Posts: 41

Moved here from FB.

Phish sites aren't anything we deal with, as Freddy mentioned.

Please read here for sites we will work on. Very Happy

Not quite a Newb Joined: 04 Jun 2008 Posts: 74

ooops - sorry, my bad. Embarassed

reported.

I've been straight baiting for about 4 years thanks to this site, but I've finally got bored with it (!!!!) so just been lurking on here for last couple of months - don't really want to get into another area just yet. Don't worry, I haven't given up completely, and am actually working on a couple of software tools which when I finally complete them (couple of months away believe it or not) should hopefully be a whole new era for baiting and killing off the lads faster than they'll ask you for to run down the local WU. Laughing