Phishing for the end

Grok Headline matches for Phishing for the end

Anti-Phishing Toolbar Available. How to
Avoid Bank and Ebay Phishing Scams

Anti-Phishing Toolbar Available. How to
Avoid Bank and Ebay Phishing Scams 12/30/2004 07:54 PM
Tech-Recipes Dec 30 2004 11:09PM GMT

Gone Phishing

Gone Phishing 01/25/2004 09:50 PM

Phishing and Bouncing

Phishing and Bouncing 09/12/2004 12:36 PM

Looks like the trick of using redirection CGIs at popular website (described in Phishing with Google) is getting popular among phishers. I just got a couple that uses AOL's redir-complex CGI at:

http://r.aol.com/cgi/redir-complex?url=whereever

Note that phishers can use not just the redirecting CGIs, but also those CGIs that use return URL as parameters.  In fact, these types of CGIs are popular among financial institutions and single-sign on services.  For example, both Passport and 3D-Secure uses them.

DIY phishing kits hit the Net

DIY phishing kits hit the Net 08/19/2004 05:48 AM
My little fraudster

Do-it-yourself phishing kits appear on
web

Do-it-yourself phishing kits appear on
web 08/21/2004 04:39 PM
Personal Computer World Aug 21 2004 8:48PM GMT

Phishing behind Google

Phishing behind Google 08/28/2004 01:03 AM

I just received a phishing email purporting to be from PayPal.  No surprise there since I get many of them everyday, but I looked closer at this one because it looked very professionally done.  I looked at the raw message and found this odd link:

This particular phisher is bouncing off Google to hide itself from domain name-based phishing detectors and scanners.  Clever.  Clicking on the link will open a browser to Google's URL search CGI which will automatically redirect the browser to the phishing site at IP address 209.152.181.10.  This trick will bypass phishing detectors that examines only the domain name part of a URL to see if it looks suspicious.

So the lesson here for security developers is to look at all the parameters and to keep track of oh-so-helpful redirectors like Google.  Also, website developers should keep in mind that helpful service is helpful to all, including the bad guys, and they might become an unwitting partner in crime.  For lawyers, it's a new source of income concern.

Phishing for Opera (GM#007-OP)

Phishing for Opera (GM#007-OP) 06/03/2004 12:03 PM
GreyMagic Software (Jun 03 2004)

eBay Goes Phishing

eBay Goes Phishing 01/03/2005 12:35 PM
The popular online auction site rolls out a new approach in tackling account hackers: cut bait.

Phishing on the rise in U.S

Phishing on the rise in U.S 06/15/2004 02:57 PM
ZDNet Jun 15 2004 5:56PM GMT

War Against Phishing Continues

War Against Phishing Continues 03/14/2005 04:32 PM
Phishers and other online scammers are well ahead of law enforcement officials and security experts right now in terms of techniques and tactics.

Political Phishing

Political Phishing 08/03/2004 12:32 PM
It's election season, and that means that, just like with all the other news-sensitive scams, phishers are getting political. The latest is a phishing email that simply copied a donation request from the John Kerry campaign, but changed the link to a fake site. Of course, the folks behind the scam made one very stupid mistake: remotely using an image hosted on the Kerry website -- which was quickly changed by the campaign to explain that the site was a scam (though, it's likely this confused some people -- hopefully enough to stop them from donating). Still, it's likely that the next version won't make the same mistake. With the success phishing emails have had lately, and the fervor with which people seem to be donating to campaigns, an awful lot of cash supposedly going to campaigns is going to be making criminals wealthy.

The future of phishing

The future of phishing 04/29/2004 10:42 AM
vnunet.com Apr 29 2004 2:09PM GMT

IE bug provides phishing tool

IE bug provides phishing tool 12/10/2003 05:50 AM
ZDNet UK Dec 10 2003 5:09AM ET

Phishing attacks rise in U.S

Phishing attacks rise in U.S 05/06/2004 04:04 PM
ZDNet May 6 2004 7:21PM GMT

Best news in the war on spam: phishing

Best news in the war on spam: phishing 05/24/2004 03:10 AM
Boston Globe May 24 2004 6:25AM GMT

Thunderbird Will Have New Phishing Tool

Thunderbird Will Have New Phishing Tool 03/23/2005 05:18 PM

The Mozilla email client, Thunderbird will have scam detection capabilities. We all have seen phishing emails that try to have you click on a link that sends you to a bogus website rather then the website you thought you were going to. They try to get your usernames and passwords from you. If Thunderbird thinks an email message is a possible scam message - it will notify the user with a visual queue. Similar to spam tools, it will also have a "not a scam" button to denote safe messages - for example notifications of online statements from banks or stock institutions.

According to the open-source blog,  Among its features, Thunderbird will reconcile the hostname shown in an href's display link and the underlying destination URL -- which is one of the primary methods for 'phishing' people into visiting sites that aren't as they appear.There is a final warning dialog if a user proceeds and clicks a link, and gives one last chance to cancel.

 

Crooks Are Phishing For Your Life

Crooks Are Phishing For Your Life 05/19/2004 04:15 PM
CBS News May 19 2004 8:20PM GMT

Adam Stiles Goes Phishing

Adam Stiles Goes Phishing 03/19/2005 03:11 AM

NetCaptor's Adam Stiles has been on a phishing trip.

Pharming Out-Scams Phishing

Pharming Out-Scams Phishing 03/14/2005 05:21 PM
A fast-spreading online swindle redirects web users to phony sites where criminals can capture passwords and other data. Unlike phishing, which targets one user at a time, pharming nabs multiple victims at once. By Michelle Delio.

Phishing Attacks on the Rise

Phishing Attacks on the Rise 05/19/2004 06:10 PM
The volume of such attacks is growing rapidly, according to anti-fraud firm Cyota, which detected some 450 distinct phishing expeditions in March alone.

Email Spam and Phishing

Email Spam and Phishing 05/12/2004 05:18 PM
WebDevInfo May 12 2004 8:18PM GMT

Phishing to cost SA millions'

Phishing to cost SA millions' 05/18/2004 10:36 PM
Sunday Times South Africa May 19 2004 2:49AM GMT

Phishing Expeditions Are Multiplying

Phishing Expeditions Are Multiplying 05/14/2004 07:41 PM

Phishing morphs into pharming

Phishing morphs into pharming 02/01/2005 09:24 PM

Re: New whitepaper "The Phishing Guide"

Re: New whitepaper "The Phishing Guide" 09/23/2004 03:11 PM
Aleksandar Milivojevic (Sep 23 2004)

Be Aware of Phishing Scams!

Be Aware of Phishing Scams! 07/04/2004 06:57 PM
WebDevInfo Jul 4 2004 11:27PM GMT

Congress, Vendors Put Phishing Under the
Gun

Congress, Vendors Put Phishing Under the
Gun 06/28/2004 06:45 AM
VeriSign's new service aims to help protect against "phishing" expeditions.

Lawmakers: Phishing season is over

Lawmakers: Phishing season is over 07/15/2004 10:11 AM
ZDNet Jul 15 2004 2:15PM GMT

Reports of phishing attacks up, again,
in May

Reports of phishing attacks up, again,
in May 06/24/2004 01:10 PM
BOSTON - Incidents of phishing, a type of online identity theft, were up slightly in May, after surging in March and April, according to a report from an industry group.

About face on ID theft, phishing

About face on ID theft, phishing 07/15/2004 03:38 PM
ZDNet Jul 15 2004 6:55PM GMT

MasterCard Looks to Crack Down on
Phishing

MasterCard Looks to Crack Down on
Phishing 06/22/2004 10:35 AM
MasterCard is teaming up with digital fraud protection company NameProtect to help shut down online scams.

MasterCard tackles phishing

MasterCard tackles phishing 06/22/2004 10:30 AM
Company wants to attack scammers before they rip off consumers' data, rather than chase down criminals after they've victimized people.

Phishing on rise: Study

Phishing on rise: Study 06/15/2004 04:42 PM
globetechnology.com Jun 15 2004 9:27PM GMT

Gartner: Phishing on the rise in U.S.

Gartner: Phishing on the rise in U.S. 06/15/2004 11:29 AM
Nearly 2 million people say their checking accounts were breached during the last year, the company says.

Anti-Phishing Tools

Anti-Phishing Tools 08/17/2004 11:26 AM

The MailFrontier Phishing IQ Test

The MailFrontier Phishing IQ Test 08/18/2004 04:51 PM
a quiz

survey.mailfrontier.com/survey/quiztest.cgi?themailfrontierphis hingiqtest
track this site | 3 links

Phishing in the Fund Pond

Phishing in the Fund Pond 07/02/2004 10:00 AM
Online scammers begin to target mutual fund investors.

New whitepaper "The Phishing Guide"

New whitepaper "The Phishing Guide" 09/22/2004 02:20 PM
Gunter Ollmann (NGS) (Sep 22 2004)

Phishing Dips into Yahoo IM

Phishing Dips into Yahoo IM 03/25/2005 09:19 PM
eWeek Mar 26 2005 1:33AM GMT
Grok Description matches for Phishing for the end
GrokA matches for Phishing for the end

Phishing for the end

The following phrases have been identified by the grok system as matching this entry: