Consumers still falling for phish

[PineRidge]

I dialed a 90% on the bunch.... /forums/images/graemlins/tongue.gif

Some are a little tricky....

 

[Gatorboy]

I am proud to say I scored 100%. I feel I'm pretty savy when it comes to knowing a valid web address from an imposter.

I say, "Go Phish!" to those scammers sending me those emails!

 

[johnday]

Just what I thought, you guys are some of the smartest people I've ever dealt with. /forums/images/graemlins/shocked.gif

 

[Inspector507]

Just make sure you notify the REAL website, so maybe they can be, at least, slowed down in their phishing

 

[AndyM]

I very rarely receive spam of any kind, so I just received my first one the other day.

Since I never received one before, it took me by surprise how real it looked. /forums/images/graemlins/mad.gif /forums/images/graemlins/crazy.gif

Of course, I was smart enough to figure out that Ebay wouldn't ask for my social security number! /forums/images/graemlins/shocked.gif /forums/images/graemlins/crazy.gif /forums/images/graemlins/blush.gif

 

[BobReeves]

90% /forums/images/graemlins/frown.gif I missed the Microsoft one, I avoid MSN as much as posible, had nothing to go by so just made a WAG.

 

[riptides]

The most suttle attack we have seen thus far is a redirection attack of major e-commerce sites via simple cgi scripting. Run from a client, the web-site is polluted, using a redirection to a hoax site, which displays the graphics of choice - usually of the major e-commerce site.

Your personal information is then gleaned accordingly.

Only paying attention to the status line, in the address box or
URL will you see this slight deviation.

I'll see if I can post the examples in the AM.

Patches were know to have solved this, but a lot of web masters just did not do it....

Not pretty.
-Mike Z. /forums/images/graemlins/blush.gif

 

[Gatorboy]

<font color="blue"> I avoid MSN as much as posible, had nothing to go by so just made a WAG. </font>

The key is to look at the URL of the link provided in the email. That one ended with msn.com -- valid.

Also, just because the TEXT says one thing, make sure the actual link is correct. On IE, you can see the real link in the bottom status bar. Example: http://www.TractorByNet.com.

Alot of these will have a similar web address, such as secure-ebay.com or earthlink.net (note .NET instead of .COM)

That's the easiest way to figure out the good from the bad.

 

[riptides]

Sites fixed. For more information on this previous hole see:

http://www.zapthedingbat.com/security/scriptinjection/


-Mike Z. /forums/images/graemlins/blush.gif

 

[Golfgar4]

Dave,

Thanks for the explanation. I was wondering if someone would explain the differences to those of us that tend to be "computer challenged"! /forums/images/graemlins/smirk.gif /forums/images/graemlins/grin.gif