bugtraq - Re: [HV-PAPER] Anti-Phishing Tips You Should Not Follow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <442FB0B1.402.C10CDCC1@nick.virus-l.demon.co.uk>
Date: Sun, 02 Apr 2006 11:08:33 +1200
From: Nick FitzGerald <nick@...us-l.demon.co.uk>
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: [HV-PAPER] Anti-Phishing Tips You Should Not
	Follow

michaelslists@...il.com wrote:

> Tip #2: Invalid credentials work on impersonated websites.
> 
> If you feel there is something wrong with a website, use invalid
> username and invalid password to log in. If the website then presents you
> with the "Logon failed" page, you are possibly on a legitimate website, so
> you may proceed with logging in using your correct credentials. If it gets
> you right through - it is definitely a phishing attempt. "
> 
> argghh!!!!

8-)

There was a series of phish a while back (early last year was the last 
I think saw one of these) where the phisher seemed to be aware of this 
possible tactic, and always "failed" the first login (and always 
accepted the second no matter what you put, including exactly the same 
(bogus) credentials).

Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/