full-disclosure - .MAC Webmail phishing attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040323085826.28643.qmail@web25108.mail.ukl.yahoo.com>
From: r4bb1t_f00d at yahoo.co.uk (rabbit food)
Subject: .MAC Webmail phishing attack

--
Information 
--

It may be possible to redirect a naive .Mac webmail
user, to another site, possibly, one mocked up as
webmail (a user may ignore the fact SSL is not
present).

http://webmail.mac.com/redirect/http://your url

Using unicode representations of the word redirect,
may aid an attacker through "obscuring",
the word - redirect-.

http://webmail.mac.com/%72%65%64%69%72%65%63%74/http://aURLofchoice/

--

___________________________________________________________
Yahoo! Messenger - Communicate instantly..."Ping" 
your friends today! Download Messenger Now 
http://uk.messenger.yahoo.com/download/index.html