Phishing mail

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Master Baiter Joined: 30 Jan 2010 Posts: 182

Hi all
I am a noob here , although i have a my first bite ongoing at this time.
Just need some info to stay safe ,so,
can anyone tell me how to recognize a "phishing email"
Thank,s for any info you can give me and good hunting.

Regards PG Malone

Posted: Thu Feb 11, 2010 8:36 pm

Here's one from a Yahoo phisher I got today.

Quote:

Warning!Thursday, February 11, 2010 7:51 AMFrom: This sender is DomainKeys verified"Yahoo! Customer Care" <[email protected]>Add sender to ContactsTo: undisclosed-recipients Dear Valued Member,

Due to the congestion in all Yahoo! users accounts,Yahoo! would be shutting down all unused accounts. In order to avoid the deactivation of your account, you will have to confirm your e-mail by filling out your Login Info below by clicking the reply button. The personal information requested are for the safety of your Yahoo! account. Please Fill all information requested.

Username:............................................
Password: .............................................
Date Of Birth: ......................................
Occupation: ......................................
Country Of Residence:............................

After you must have followed the instructions in the sheet, your Yahoo! account will not be interrupted and will continue as normal. Thank you for your usual co-operation. We apologize for any inconvinience.

Yahoo! Customer Care

Case number: 8941624
Property: Account Security
Contact date: 11-02-2010

Notice the way the sentences are structured. No company would talk like this.

Posted: Thu Feb 11, 2010 8:42 pm

And another.

Quote:

Due to the congestion in all Yahoo users and removal of all unused Yahoo Accounts,Yahoo would be shutting down all unused accounts,You will have to confirm your E-mail by filling out your Login Info below after clicking the reply botton, or your account will be suspended within 24 hours for security reasons.

UserName: ............................................

Password:..............................................

Date Of Birth: ........................................

Country Or Territory:...............................

After Following the instructions in the sheet,your account will not be interrupted and will continue as normal.Thanks for your attention to this request.We apologize for any inconvinience.

Yahoo! Customer Care
Case number: 8941624
Property: Account Security

Copyright © 2009 Yahoo! Inc. All rights reserved.

Baiting Guru Joined: 31 Jan 2007 Posts: 12237

^^^Great examples. Anytime you receive an email requesting personal information ie: passwords, home address, account numbers ect... never give them. Paranoia on the internets is your friend. Have them send a letter instead (your bank or credit card company should surely already know your address, after all, they manage to get the bills to your house), a reputable business would never ask for such information by email.

Edit: To add stuff.

Master Baiter Joined: 30 Jan 2010 Posts: 182

Thank,s for the quick reply folk,s
Much appreciated.

Regards PG Malone

Posted: Thu Feb 11, 2010 8:58 pm

Here's one from *cough* Chase

Quote:

UPDATE YOUR CHASE ACCOUNTThursday, February 11, 2010 2:39 PMFrom: "Chase Bank Online" <[email protected]>Add sender to ContactsTo:
Dear valued customer,
This is to alert you on the fraudlent activities going on in some of our customers account.
We advise all our customers to logon to their account to verify their identity.
To do this please follow the login sign.
Account Verification.

NB: Failure to verify your indentity will lead to your account being suspended.

Posted: Thu Feb 11, 2010 9:44 pm

Basically, if the E-mail asks you to "verify" any sort of password, PIN code or whatever, then chances are it's a trick.
They already have your information, due to them owning the server it's stored on. If the server is screwed up (as some phishing messages claim), they most likely have backups of the same information.

If in doubt, contact the company support department directly and ask them to confirm if the E-mail is legit. Don't use any links in the message itself though as they're mostly likely faked versions designed to collect victim information.