full-disclosure - Same old phishing link manipulation or new?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <04Jun13.220702-0400_edt.373690-27788+47953@ams.ftl.affinity.com>
From: khermansen at ht-technology.com (Kristian Hermansen)
Subject: Same old phishing link manipulation or new?

I recently received a spoofed email from USbank.com, and the link is encoded
like this to fool the browser:

http://www.usbank.com%01@....96.108.138/www/us/verify.html

Is this the same old trick or something new?

Kristian Hermansen
khermansen@...technology.com