Friday, January 23. 2004
Phishing scams coming hot and heavy
The Phishing scams are coming hot and heavy. The latest Citibank one is pictured here (Don't worry, that's not actually a live link. It's safe, it's a GIF picture of the actual email).
The URL looks legit.....but it's a browser vulnerability. The actual code is (wrapped and slightly sanitized):
web.da-us.citibank.com%6Csignin%6Ccitifi%6Cscripts%6C@ %36%31%2E%35%32%2E%31%38%33 %2E%32%30%37:%32%30%37%35/% 63/%69%6E%64%65%78%2E%68%74%6D
The above link decodes to
web.da-us.citibank.comlsigninlcitifilscriptsl@61.52.183.207:2075/c/index.htm
As you can see, that's not actually citbank. So even if the URL looks legit, don't trust it.
Trackbacks
Trackback specific URI for this entry
No Trackbacks
Comments
Display comments as
(Linear | Threaded)
I got three of these in one day. If you go to Citibank's REAL page and click on their Consumer Alert, they give you a link to Report email abuse. I reported all of mine. I worry that less educated Net users and consumers (we all know some) would be easily taken in by this!