[Full-Disclosure] US Bank scam
Peter B. Harvey (Information Security)
peterharvey at emergency.qld.gov.au
Tue Jun 15 23:30:47 BST 2004
Couple of notes,
First the page is not encrypted.
Second the overlay stays on top when you switch windows. At the moment it is sitting in the middle of the email i am typing.
However a novice to computer scams could be fooled quite easily by this. Impressive.
Information Security Officer
Dept. Emergency Services - QLD
Phone: +61 7 3109 7292
From: Eric LeBlanc [mailto:inouk at igt.net]
Sent: Wednesday, June 16, 2004 3:59 AM
To: full-disclosure at lists.netsys.com
Subject: Re: [Full-Disclosure] US Bank scam
On Tue, 15 Jun 2004, David Lederman wrote:
> This is the best phishing scam I've seen yet:
> I have Windows Server 2003 fully patched and this works. The program fakes an address bar so this
> would pass through most people's safety check, after all the address bar clearly has the correct
> There are bugs in the code, for example, all your Internet Explorer windows will now have this
> address, but again for most people would only have one window open.
If you have google's toolbar or something similar, it will overwrite this
toolbar and not the address bar.
But, I must admit that this thing is ingenious !
inouk at igt.net
UNIX is user friendly.
It's just selective about who its friends are.
Full-Disclosure - We believe in it.
This correspondence is for the named persons only.
It may contain confidential or privileged information or both.
No confidentiality or privilege is waived or lost by any mis transmission.
If you receive this correspondence in error please delete it from your system immediately and notify the sender.
You must not disclose, copy or relay on any part of this correspondence, if you are not the intended recipient.
Any opinions expressed in this message are those of the individual sender except where the sender expressly,
and with the authority, states them to be the opinions of the Department of Emergency Services, Queensland.
Full-Disclosure is hosted and sponsored by Secunia.