full-disclosure - MSN fake login website

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: khatib at engin.umich.edu (Elkhatib, Ahmad)
Subject: MSN fake login website

Hello list, 

This is a lame attempt from someone to collect MSN passport passwords.
Users on MSN Messenger have been sent this URL which asks you for your
passport login. 

http://www.geocities.com/dna_cta/FreeMsn.Html

This is sent to the user in the context of an upgrade to MSN8. When a
user logs in the person harvests the users contact list and sends the
url to everyone in the list of the victim. 

Just posted this incase you all haven't seen this yet. Sorry in advance
if this has been posted before. 

I have also CC'ed geocities/yahoo about this. 

./Ahmad