Educause Security Discussion mailing list archives

Re: URL switching in e-mails


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Tue, 3 Jan 2006 17:49:02 -0500

On Tue, 03 Jan 2006 16:14:38 CST, Alan Amesbury said:

One problem with doing that automagically is when the phishing URL
points to a host like

    www.paypal.com cgi-bin webscr cmd--secure-amp-sh-u
https.hurricane.xycum.com

That's why the Slashdot code would output "[xycum.com]" which would hopefully
look suspicious to the user... ;)

Attachment: _bin
Description:


Current thread: