full-disclosure - MSN fake login website

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [thread-next>] [month] [year] [list]

From: khatib at engin.umich.edu (Elkhatib, Ahmad)
Subject: MSN fake login website

Hello list, 

This is a lame attempt from someone to collect MSN passport passwords.
Users on MSN Messenger have been sent this URL which asks you for your
passport login. 

http://www.geocities.com/dna_cta/FreeMsn.Html

This is sent to the user in the context of an upgrade to MSN8. When a
user logs in the person harvests the users contact list and sends the
url to everyone in the list of the victim. 

Just posted this incase you all haven't seen this yet. Sorry in advance
if this has been posted before. 

I have also CC'ed geocities/yahoo about this. 

./Ahmad