[pchelpers] News:Strange spoofing technique evades anti-phishing filters

By Dan Goodin in San Francisco
25 May 2007 03:30
Targets include PayPal, eBay and others


A Reg reader has produced screen shots that demonstrate a powerful
phishing technique that's able to spoof eBay, PayPal and other top web
destinations without triggering antiphishing filters in IE 7 or Norton
360. Plenty of other PayPal users are experiencing the same ruse,
according to search engine results.

Matty Hall, a London resident who runs a nightclub and record label,
says he's been careful to practice good PC hygiene. He runs Norton 360
and uses the latest IE version, which Microsoft has taken pains to lock
down with a variety of safety features, including one that alerts users
when they visit many spoofed sites. He's also careful to examine the
certificates that accompany financial sites he visits before logging in
to them.

So Hall was surprised recently when, after attempting to log in to a
PayPal page that both IE and Norton had given a clean bill of health, he
was prompted for his date of birth, social security number, mother's
maiden name, credit card details and other sensitive information. Aside
from the verboten solicitation for so much detailed information, about
the only thing that looked suspicious was the poor grammar and awkward
syntax of the accompanying text. It read:

More here:
http://www.channelregister.co.uk/2007/05/25/strange_spoofing_technique/
-- 
John Durham
Site http://modecideas.com
Server hosted on Ubuntu 4.10
Good advice is like good paint. It only works when applied.



-- 
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: