Bad phish

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Jun 11, 2010 9:03 pm

Got this today:

Quote:

Dear Customer,

You have exceeded the maximum number of logon attempts and your account has been locked.
Please use the Next below to reinstate your access.

Log on

Alliance & Leicester plc.

Online Banking Security Department
Copyright © 2010 Alliance & Leicester plc - Copyright.

Obviously a phishing attempt, right? Only one problem... there is no "Next" button and the idiot forgot to include a link with the "Log on". I guess he thought just making it blue would be sufficient. What a maroon... Rolling Eyes

Posted: Fri Jun 11, 2010 9:06 pm

Oh. Just like passport.jpg! Smooth.
Laughing

Posted: Fri Jun 11, 2010 9:14 pm

I've had 3 phishings this week, two of them from completly non-local banks. I always foward them to the bank's anti-phishing address, like it's my civic duties or something.

Posted: Fri Jun 11, 2010 9:21 pm

I get so many phishing attempts with links that don't work. It seems they would test them first before sending them out. Rolling Eyes

419Eater is my life Joined: 10 Jul 2008 Posts: 366

^^^^I get so many phishing attempts with links that don't work.

If they don't work that is good, it usually means that they have already been killed. Twisted Evil

Killing phishing sites isn't anywhere as much fun as baiting because it is important to do it as soon as possible. The weak link in a phishing scam is the compromised website used to forward the banking or credit card information.

For some reason I was getting a lot of phishing emails for a while on my RL account. I set up an old computer to isolate it from anything important to me (a compromised web site may well also be infected) What we did was send email and in many case call the real website owner or the website host and the security for the bank emailing them with the headers and source of the phishing email.

The phising scammers many times target victims when security is not available and the potential victims are likely to be reading email. Friday nights, long weekends and holidays.

We were part of killing about 75 of these sites. Some of them had some interesting approaches. For a while the phishing scammers would have multiple intermediate sites so when the first one was killed the additional reports might be ignore by security. The first one I saw like this we killed the first site and for some reason I looked at the link in the second phishing email and noticed it was different. We killed that as well. Both
phishing intermediate sites were off line within 43 minutes.

Phishing emails have the most innocent victims who are just trying to follow instructions.

/rant

p.