Full Disclosure mailing list archives
RE: US Bank scam
From: "Peter B. Harvey (Information Security)" <peterharvey () emergency qld gov au>
Date: Wed, 16 Jun 2004 08:30:47 +1000
Couple of notes, First the page is not encrypted. Second the overlay stays on top when you switch windows. At the moment it is sitting in the middle of the email i am typing. However a novice to computer scams could be fooled quite easily by this. Impressive. Peter ____________________________________________ Peter Harvey Information Security Officer Dept. Emergency Services - QLD Phone: +61 7 3109 7292 ____________________________________________ -----Original Message----- From: Eric LeBlanc [mailto:inouk () igt net] Sent: Wednesday, June 16, 2004 3:59 AM To: full-disclosure () lists netsys com Subject: Re: [Full-disclosure] US Bank scam On Tue, 15 Jun 2004, David Lederman wrote:
This is the best phishing scam I've seen yet: http://www.bis1bp.com/a12/index.html I have Windows Server 2003 fully patched and this works. The program fakes an address bar so this would pass through most people's safety check, after all the address bar clearly has the correct address. There are bugs in the code, for example, all your Internet Explorer windows will now have this address, but again for most people would only have one window open.
If you have google's toolbar or something similar, it will overwrite this toolbar and not the address bar. But, I must admit that this thing is ingenious ! E. -- Eric LeBlanc inouk () igt net -------------------------------------------------- UNIX is user friendly. It's just selective about who its friends are. ================================================== _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html This correspondence is for the named persons only. It may contain confidential or privileged information or both. No confidentiality or privilege is waived or lost by any mis transmission. If you receive this correspondence in error please delete it from your system immediately and notify the sender. You must not disclose, copy or relay on any part of this correspondence, if you are not the intended recipient. Any opinions expressed in this message are those of the individual sender except where the sender expressly, and with the authority, states them to be the opinions of the Department of Emergency Services, Queensland. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- US Bank scam David Lederman (Jun 15)
- Re: US Bank scam Eric LeBlanc (Jun 15)
- RE: US Bank scam Scott Dodson (Jun 15)
- RE: US Bank scam Nick FitzGerald (Jun 15)
- <Possible follow-ups>
- Re: US Bank scam Hamby, Charles D. (Jun 15)
- Re: US Bank scam Nick FitzGerald (Jun 15)
- RE: US Bank scam Peter B. Harvey (Information Security) (Jun 15)
- RE: US Bank scam wszumera (Jun 15)