[EMAIL PROTECTED] wrote: > Tip #2: Invalid credentials work on impersonated websites. > > If you feel there is something wrong with a website, use invalid > username and invalid password to log in. If the website then presents you > with the "Logon failed" page, you are possibly on a legitimate website, so > you may proceed with logging in using your correct credentials. If it gets > you right through - it is definitely a phishing attempt. " > > argghh!!!!
8-) There was a series of phish a while back (early last year was the last I think saw one of these) where the phisher seemed to be aware of this possible tactic, and always "failed" the first login (and always accepted the second no matter what you put, including exactly the same (bogus) credentials). Regards, Nick FitzGerald _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
