We have been seeing a version of that same "phishing" attempt without the
atrocious spellings. In almost all cases, the small windows were running
from hacked web servers.
Vikki
"Kuo, Jimmy"
<Jimmy_Kuo@avertl To: "Crime List" <crime@private>
abs.com> cc:
Sent by: Subject: RE: [spam] CRIME Another lousy fraud attempt
owner-crime@private
x.edu
12/10/2003 08:25
PM
Except for the attrocious spelling in the actual message, the technique is
interesting.
Nothing in the concept shows that it's not Citibank. I think this method
will be used more often in the future.
The concept opens a window, which sprouts another smaller window that asks
for the personal information. The bigger window takes you to a real
citibank web page, making it look legit.
Jimmy
-----Original Message-----
From: Mark T. Johnson [mailto:markbarb2@private]
Sent: Wednesday, December 10, 2003 6:24 PM
To: Crime List
Subject: [spam] CRIME Another lousy fraud attempt
Hi everyone,
Here is another attempt at gathering personal and financial info.
Mark
----- Original Message -----
From: CITIBANK
To: Markbarb
Sent: Wednesday, December 10, 2003 5:43 PM
Subject: Citionline E-MAIL Verification - markbarb2@private
Dear Citi-bank Cardholder,
This email was ssent by the Citbiank server to veerify your email
addres. You must colmtpee this poescrs by clicking on the link
below and enteering in the smal window your Citi-bank Debit
full Card nummber and CARD PIN that you use on Atm Machine.
That is done for your petcortion -K- becouse some of our memmbers no
lgoenr have access to their email adeedssrs and we must verify it.
To veerify your e-mail addres and akcess your Citicard account, clik
on
the link beloow. If ntohing hapenps when you clic on the link -0
copye
and paste the link into the addres bar of your web broswer.
http://www.citibank.com/?meEo7LvZjTeFPHkEh2TNCzKDpuEbyOAV3fjb2OblTo2z7meop7
---------------------------------------------
Thank you for using Citi!
---------------------------------------------
This automaitc email snet to: markbarb2@private
Do not rpely to this email.
d3HZG8uji2aUXe9tob8B
This archive was generated by hypermail 2b30 : Thu Dec 11 2003 - 08:33:10 PST