Phishers now abusing dynamic DNS services

[pagvac <unknown.pentester () gmail com>]

I got another Paypal phishing attempt today (I get about one every week :-) ).

The interesting thing about this attempt is that the phisher seems to
be using a dynamic DNS service to gain the trust from the victim.

In this case the html link was pointing to http://www.paypal.25u.com
which doesn't seem to resolve at this moment.

www.paypal.25u.com does of course look more legitimate than some
random IP address in which the word "paypal" is not included.


--
pagvac (Adrian Pastor)
www.ikwt.com - In Knowledge We Trust
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/