bugtraq - RE: Amazon phishing scam on Yahoo servers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <5ECA7F114577634186484375514DBB510A559B84@hurricane.ssdcorp.net>
Date: Thu, 23 Feb 2006 16:39:34 -0500
From: Alex Eckelberry <AlexE@...belt-software.com>
To: Paul Laudanski <zx@...tlecops.com>,
	Geoff Vass <geoff@...zow.com.au>
Cc: bugtraq@...urityfocus.com
Subject: RE: Amazon phishing scam on Yahoo servers


There's a LOT of phishing domains on Yahoo.  Apparently all you need to
do setup an account is a fake address and phone number.  I routinely
report it to them.  You can always send an email to
phishing-abuse@...yahoo-inc.com as well as anyone else you can find.

Alex


-----Original Message-----
From: Paul Laudanski [mailto:zx@...tlecops.com] 
Sent: Wednesday, February 22, 2006 11:41 PM
To: Geoff Vass
Cc: bugtraq@...urityfocus.com
Subject: RE: Amazon phishing scam on Yahoo servers

Thanks for the reply, I'm seeing all sorts of strange URLs being used
for the popular sites such as banks and ebay, amazon, paypal.  Amazing
isn't it?

On Wed, 22 Feb 2006, Geoff Vass wrote:

> Other domains used for phishing I have seen are paypal-unlocking.net, 
> secure.commonwealth-banking.com and 
> citibusinessonline.da-us.citybizcorp.com.
> 
> Surely someone, somewhere, has to take some responsibility for 
> allowing domains to be created which are clearly and obviously bogus. 
> Who could possibly have a reason to register paypal-unlocking.net?
> 
> It's also interesting to "Google" the names of the people registering 
> some of these domains, I have seen a few who were famous for one 
> reason or another. I wonder if it's possible to register a domain with

> the name George W Bush or F. Castro..
> 
> Cheers
> Geoff Vass
> 
> -----Original Message-----
> From: Paul Laudanski [mailto:zx@...tlecops.com]
> Sent: Tuesday, 21 February 2006 18:11
> To: bugtraq@...urityfocus.com
> Subject: Amazon phishing scam on Yahoo servers
> 
> 
> We just got some emails for amazon phishing scams.  Turns out the scam

> domain was registered just today (same day).  Internic and others 
> aren't
> 
> reporting it, but Melbourne IT does.  Phishing site resides on Yahoo's

> servers, but their Abuse department closed at 5pm.  A full 6 or so 
> hours
> 
> to run before they open back up.
> 
> 
> Assessment:
> http://castlecops.com/a6531-Amazon_phishing_scam_on_Yahoo_servers.html
> 
> 

--
Paul Laudanski, Microsoft MVP Windows-Security [de]
http://de.castlecops.com [en] http://castlecops.com [wiki]
http://wiki.castlecops.com [family] http://cuddlesnkisses.com

[This message is for the designated recipient(s) only and may contain
privileged or confidential information.  If you have received it in
error, please notify the sender immediately and delete the original. Any
other use of the email by you is prohibited.]