From: Vincent van Scherpenseel (mailinglistsvanscherpenseel.nl)
Date: Mon Jun 06 2005 - 08:48:21 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi there,

I've just finished writing a technical analysis on the Postbank.nl phishing
scam hitting Dutch e-bankers as from last Saturday. This was fortunately
really big in the Dutch media so the amount of victims may have been limited.

I found some interesting things in the scam: the victim was redirected 4 times
(including through Google and MSN) before arriving at his/her final location,
the use of URL obfuscating to social engineer the user into clicking 'the
link below' and the inclusion of a stylesheet over a HTTPs connection to
resemble an authentic bank to Joe Average.

You can read the analysis at: http://www.syn-ack.org/papers/postbank.html .

I would love to receive any feedback on it, either positive or negative, as
long as arguments are supplied.

 - Vincent 'rastakid' van Scherpenseel
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]