Dynadot

Phishing Scam on Yahoo! Very Good one too

Spaceship Spaceship
Watch
Ok, listen carefully. I share these because our Email PW's are the root access to our domains and at all costs they must be guarded.

This is a simple social choochoo that plays to the nawty aspect card.
Free pics of pretty girls, 2 of them, ummmm really good friends.
Tuff not to want to maybe have a little peek, you know, your going that way anyways.

It is a geocities signup, but from the looks of it could be modified to look like any Y sign in page.

Close to the best phishing page I've ever seen.
My neice sent this because it is getting spammed through YIM.

Someone posing as a girl sends this saying she and her friend have just posted some pix.

http://www.geocities.com/tamira18_ /smith/index.html


This opens to a geocities signin page.

It is almost perfect, although we can spot the mistakes looking
for them, if I dont tell you first, and you are chasing this promised
pics on the site.. your hooked.

Every link on the page is legitamite, however there is an error on the page.
(popup warning is suppressed, but the error icon bottom left is there)
You dont see it, but its right above start.

So signed in or not, you click the link offered and it goes to the above form page.

New window, maybe the cookie doesnt carry over so you put in your YID
and PW and hit Sign in. Thats when the beauty unfoldes. A page follows saying you have sent a ecard, you go wtf... click out or back out. If back its to the same page, if out it is to the real sign in page where perhaps you try again. Anyone not really knowing how this sh!t works, has just given full access to all yahoo services they are subscribed to.

Now just for fun, type in gibberish and hit sign in.
Next just hit it without filling anything out.
I know -Bill- and a few others will appreciate whats inside the source....

How can the address bar read geocities? Which it clearly does.
Cyberian hates Java

Here are the cuties...
The form? This error....
Line: 1
Char: 1
Error: 'document.login_form.login' is null or not an object
Code: 0
URL: http://www.geocities.com/tamira18_s...dex.html?200074

The AddressBar?
http://themis.geocities.yahoo.com/t...bb297bcc8219d0f...... ;)

And thats enuff lesson... Dont try this at home ;)

Peace,
Cyberian
 
0
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
Looks l ike Yahoo took the link down ;)
 
0
•••
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back