full-disclosure - MSN fake login website

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: xillwillx at yahoo.com (w g)
Subject: MSN fake login website

i put in my username and password and nothing happened...i think its broken .. i should mail microsoft and tell them about the bug

"Elkhatib, Ahmad" <khatib@...in.umich.edu> wrote:
Hello list, 

This is a lame attempt from someone to collect MSN passport passwords.
Users on MSN Messenger have been sent this URL which asks you for your
passport login. 

http://www.geocities.com/dna_cta/FreeMsn.Html

This is sent to the user in the context of an upgrade to MSN8. When a
user logs in the person harvests the users contact list and sends the
url to everyone in the list of the victim. 

Just posted this incase you all haven't seen this yet. Sorry in advance
if this has been posted before. 

I have also CC'ed geocities/yahoo about this. 

./Ahmad 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

---------------------------------
Do you Yahoo!?
Free online calendar with sync to Outlook(TM).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030602/3b358d1f/attachment.html