Re: Grab a myspace credential

[Troy Cregger <tcregger () kennedyinfo com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HAHA! Yeah, I had just updated to firefox 2 before I went to the
phishing page and got the warning. It kinda threw me for a moment when
that happened :) but I think it's a great feature for protecting the
innocent and stupid alike.


Steven Scheffler wrote:
> If you dig into google's cache you will see that
> http://www.marcolano.com/login/ has a spoofed myspace.com login screen
> where ppl enter their credentials. These are saved in a plain text file
> myspace.txt.
>
> Firefox2 warned me about marcolano.com is a phishing site.
>
> S
>
> -----Original Message-----
> From: full-disclosure-bounces () lists grok org uk
> [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of Deepan
> Sent: Tuesday, January 16, 2007 8:56 AM
> To: Peter Dawson
> Cc: full-disclosure () lists grok org uk
> Subject: Re: [Full-disclosure] Grab a myspace credential
>
> On Mon, 2007-01-15 at 23:05 -0500, Peter Dawson wrote:
> > "but at some point all this abuse will likely start sending users off
> > to another service. "
> >  
> > thats only --if the know if they are being abused.. most of them are
> > not coherent about any such issues.. 
> >
> >
> >  
> > On 1/15/07, Kevin Pawloski <kpawloski () gmail com> wrote: 
> >         The level of phishing sites targeting MySpace and bot related
> It is not quiet easy to fool 56000+ users using phishing sites. I wonder
> how Mark is doing it. 
>
>
>
> >          activity that has been targeting MySpace lately is pretty
> >         alarming. Granted there is no real financial risk if an
> >         account gets compromised for the user but at some point all
> >         this abuse will likely start sending users off to another
> >         service. 
> >         
> >         Kevin 
> >         
> >         
> >         On 1/15/07, North, Quinn <QNorth () iso com> wrote: 
> "youmustbecompleteretards () idiot com:doyouhonestlythinkiwillputmyrealpass
> >                 wordhere" 
> >                 
> >                 ...at least there is some hope left in the world :-\
> >                 
> >                 --=Q=--
> >                 
> >                 -----Original Message-----
> >                 From: full-disclosure-bounces () lists grok org uk
> >                 [mailto:full-disclosure-bounces () lists grok org uk] On
> >                 Behalf Of Emma
> >                 Perdue
> >                 Sent: Monday, January 15, 2007 7:48 AM 
> >                 To: full-disclosure () lists grok org uk
> >                 Subject: [Full-disclosure] Grab a myspace credential
> >                 
> >                 56000+ and counting
> >                 
> >                 http://www.marcolano.com/login/myspace.txt
> >                 
> >                 --
> >                 *Emma aka TINK*
> >                 
> >                 _______________________________________________
> >                 Full-Disclosure - We believe in it.
> >                 Charter:
> >                 http://lists.grok.org.uk/full-disclosure-charter.html
> >                 Hosted and sponsored by Secunia - http://secunia.com/
> >                 
> >                 _______________________________________________
> >                 Full-Disclosure - We believe in it. 
> >                 Charter:
> >                 http://lists.grok.org.uk/full-disclosure-charter.html
> >                 Hosted and sponsored by Secunia - http://secunia.com/ 
> >         
> >         
> >         
> >         _______________________________________________
> >         Full-Disclosure - We believe in it.
> >         Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >         Hosted and sponsored by Secunia - http://secunia.com/
> >         
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFrSCznBEWLrrYRl8RAq+oAJ4wJJCP/b+aDeWB8kP9ZlTUPBKClQCcDRmf
e1QTMV6x/H9NrTCKe3LczeA=
=Sb0W
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/