Full Disclosure mailing list archives

Re: MSN fake login website


From: w g <xillwillx () yahoo com>
Date: Mon, 2 Jun 2003 18:31:46 -0700 (PDT)

i put in my username and password and nothing happened...i think its broken .. i should mail microsoft and tell them 
about the bug

"Elkhatib, Ahmad" <khatib () engin umich edu> wrote:
Hello list, 

This is a lame attempt from someone to collect MSN passport passwords.
Users on MSN Messenger have been sent this URL which asks you for your
passport login. 

http://www.geocities.com/dna_cta/FreeMsn.Html

This is sent to the user in the context of an upgrade to MSN8. When a
user logs in the person harvests the users contact list and sends the
url to everyone in the list of the victim. 

Just posted this incase you all haven't seen this yet. Sorry in advance
if this has been posted before. 

I have also CC'ed geocities/yahoo about this. 

./Ahmad 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


---------------------------------
Do you Yahoo!?
Free online calendar with sync to Outlook(TM).

Current thread: