Re: [Full-disclosure] Bank of America [phising email]

2007-02-22 Thread Peter Dawson

was not this part of the pharming attack that was exucted over the last 2d ?

On 2/21/07, James Matthews [EMAIL PROTECTED] wrote:


Yes yes! They will make sure of course however the dumb person that falls
for it thinks hey look Bank Of America can't spell heheheh

On 2/21/07, James Rankin [EMAIL PROTECTED] wrote:

 Dear phishers,

 If ever you need someone to help you with your spelling and grammar to
 make your phishing emails just a bit convincing, drop me a mail and I
 will proof-read your scam texts. I have a degree in English and I was
 regularly top of my class for spelling. Whilst I do not doubt your technical
 bot-writing capability, the standard of your text is generally poor and a
 dead giveaway. I will help!

 Ta,

 JR

 On 21/02/07, Troy Cregger  [EMAIL PROTECTED] wrote:
 
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  Got an email today that was crafted to look like it came from Bank of
  America, the message contained the following:
 
  Because of   unusual number of invalid login attempts on you account,
  we
  had to believe that,   their might be some security problem on you
  account. So we have decided to put   an extra verification process to
  ensure your identity and your account security.   Please click on A
  
href=http://www.candy-pop.com/www.bankofamerica.com/BOA/sslencrypt218bit/online_banking/index.htm
  
  target=_blanksign in to Online Banking/A to continue to the
  verification process and   ensure your account security. It is all
  about
  your security. Thank you, and   visit the customer service section.
 
  Which of course loads a phishing page that would capture login
  credentials should anyone fall for the ruse.
 
  This may be old news though and possibly related to another story I
  read
  earlier on Zone-H
  here: http://www.zone-h.org/content/view/14577/31/
 
 
 
 
  Troy Cregger
  Lead Developer, Technical Products.
  Kennedy Information, Inc
  One Phoenix Mill Ln, Fl 3
  Peterborough, NH 03458
  (603)924-0900 ext 662
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v1.4.6 (GNU/Linux)
  Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
  iD8DBQFF3HPLnBEWLrrYRl8RAmPbAJsEhggVS+bHdwHYAi6Zrax+azPPXwCfd2T8
  gKSsfPlF/9a+kPWEYacykVg=
  =aepj
  -END PGP SIGNATURE-
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




--
http://www.goldwatches.com/watches.asp?Brand=39
http://www.wazoozle.com
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] Bank of America [phising email]

2007-02-21 Thread Troy Cregger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Got an email today that was crafted to look like it came from Bank of
America, the message contained the following:

Because of   unusual number of invalid login attempts on you account, we
had to believe that,   their might be some security problem on you
account. So we have decided to put   an extra verification process to
ensure your identity and your account security.   Please click on A
href=http://www.candy-pop.com/www.bankofamerica.com/BOA/sslencrypt218bit/online_banking/index.htm;
target=_blanksign in to Online Banking/A to continue to the
verification process and   ensure your account security. It is all about
your security. Thank you, and   visit the customer service section.

Which of course loads a phishing page that would capture login
credentials should anyone fall for the ruse.

This may be old news though and possibly related to another story I read
earlier on Zone-H
here: http://www.zone-h.org/content/view/14577/31/




Troy Cregger
Lead Developer, Technical Products.
Kennedy Information, Inc
One Phoenix Mill Ln, Fl 3
Peterborough, NH 03458
(603)924-0900 ext 662
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF3HPLnBEWLrrYRl8RAmPbAJsEhggVS+bHdwHYAi6Zrax+azPPXwCfd2T8
gKSsfPlF/9a+kPWEYacykVg=
=aepj
-END PGP SIGNATURE-

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Bank of America [phising email]

2007-02-21 Thread James Rankin

Dear phishers,

If ever you need someone to help you with your spelling and grammar to make
your phishing emails just a bit convincing, drop me a mail and I will
proof-read your scam texts. I have a degree in English and I was regularly
top of my class for spelling. Whilst I do not doubt your technical
bot-writing capability, the standard of your text is generally poor and a
dead giveaway. I will help!

Ta,

JR

On 21/02/07, Troy Cregger [EMAIL PROTECTED] wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Got an email today that was crafted to look like it came from Bank of
America, the message contained the following:

Because of   unusual number of invalid login attempts on you account, we
had to believe that,   their might be some security problem on you
account. So we have decided to put   an extra verification process to
ensure your identity and your account security.   Please click on A
href=
http://www.candy-pop.com/www.bankofamerica.com/BOA/sslencrypt218bit/online_banking/index.htm

target=_blanksign in to Online Banking/A to continue to the
verification process and   ensure your account security. It is all about
your security. Thank you, and   visit the customer service section.

Which of course loads a phishing page that would capture login
credentials should anyone fall for the ruse.

This may be old news though and possibly related to another story I read
earlier on Zone-H
here: http://www.zone-h.org/content/view/14577/31/




Troy Cregger
Lead Developer, Technical Products.
Kennedy Information, Inc
One Phoenix Mill Ln, Fl 3
Peterborough, NH 03458
(603)924-0900 ext 662
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF3HPLnBEWLrrYRl8RAmPbAJsEhggVS+bHdwHYAi6Zrax+azPPXwCfd2T8
gKSsfPlF/9a+kPWEYacykVg=
=aepj
-END PGP SIGNATURE-

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Bank of America [phising email]

2007-02-21 Thread James Matthews

Yes yes! They will make sure of course however the dumb person that falls
for it thinks hey look Bank Of America can't spell heheheh

On 2/21/07, James Rankin [EMAIL PROTECTED] wrote:


Dear phishers,

If ever you need someone to help you with your spelling and grammar to
make your phishing emails just a bit convincing, drop me a mail and I will
proof-read your scam texts. I have a degree in English and I was regularly
top of my class for spelling. Whilst I do not doubt your technical
bot-writing capability, the standard of your text is generally poor and a
dead giveaway. I will help!

Ta,

JR

On 21/02/07, Troy Cregger [EMAIL PROTECTED] wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Got an email today that was crafted to look like it came from Bank of
 America, the message contained the following:

 Because of   unusual number of invalid login attempts on you account, we

 had to believe that,   their might be some security problem on you
 account. So we have decided to put   an extra verification process to
 ensure your identity and your account security.   Please click on A
 href=
 
http://www.candy-pop.com/www.bankofamerica.com/BOA/sslencrypt218bit/online_banking/index.htm
 
 target=_blanksign in to Online Banking/A to continue to the
 verification process and   ensure your account security. It is all about
 your security. Thank you, and   visit the customer service section.

 Which of course loads a phishing page that would capture login
 credentials should anyone fall for the ruse.

 This may be old news though and possibly related to another story I read
 earlier on Zone-H
 here: http://www.zone-h.org/content/view/14577/31/




 Troy Cregger
 Lead Developer, Technical Products.
 Kennedy Information, Inc
 One Phoenix Mill Ln, Fl 3
 Peterborough, NH 03458
 (603)924-0900 ext 662
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.6 (GNU/Linux)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQFF3HPLnBEWLrrYRl8RAmPbAJsEhggVS+bHdwHYAi6Zrax+azPPXwCfd2T8
 gKSsfPlF/9a+kPWEYacykVg=
 =aepj
 -END PGP SIGNATURE-

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/





--
http://www.goldwatches.com/watches.asp?Brand=39
http://www.wazoozle.com
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/