Update your Bank information

Message

Gronagor · #26 Post by **Gronagor** » Fri Jan 06, 2006 12:58 pm

Nice find AGD2!

I've planned something similar myself, but never got round to it... Will definitely be making use of this!!

Gronagor · #27 Post by **Gronagor** » Tue Jan 10, 2006 6:52 am

Woohoo!! I'm gonna use it with the fake E-bay mail I just got!

If anyone else want to join in with phishfighting, here's the link:
http://158.108.34.31/.eBay/ebay/www.eba ... -hhsin.php
PS: Remember! This is not really e-bay!

#28 Post by **Anonymous Game Creator 2** » Tue Jan 10, 2006 7:37 am

Cool, I've been waiting for some to arrive in my email but sadly the phishing hasn't been so good lately. Count me in!

And be careful not to actually click on these links, as some of them can download viruses or trojans to your PC if your anti-virus/spyware software isn't up to date.

Gronagor · #29 Post by **Gronagor** » Tue Jan 10, 2006 9:47 am

A slow process, but I eventually ended up with about 100 fake info. This will be a fun tool to have... need to use it on the Paypal e-mails as well, but I've noticed that most of those links were closed recently.

#30 Post by **Anonymous Game Creator 2** » Tue Jan 10, 2006 10:06 pm

I left mine running all night. This lucky crook just got himself an extra 1800 'victims'!

By the way, if you open it in two different browsers at once, you can double the rate of submissions.

Gronagor · #31 Post by **Gronagor** » Wed Jan 11, 2006 6:43 am

Hehehe!

I should have done that.

#32 Post by **navynuke04** » Wed Jan 11, 2006 12:50 pm

Would it not be possible to check the IP's that the fake entries are coming from and then just filter them out? Unless of course this guy's script spoofs the IP somehow...

Gronagor · #33 Post by **Gronagor** » Wed Jan 11, 2006 1:15 pm

If they bothered saving the IPs in their database, I guess so.
But it is possible to fake IPs with PHP.

#34 Post by **Anonymous Game Creator 2** » Wed Jan 11, 2006 6:17 pm

Certain email accounts like Gmail strip the IP header information before sending the message. I'm guessing that this guy's php script does something similar to that.

I remember reading somewhere (maybe his FAQ) that he took measures to ensure that the names, email addresses, and passwords generated were totally random, so that there was no obvious pattern for scammers to detect and run a filter on matching results.

Although, when you sign into Ebay, you don't usually use your email address as the username, so it's probably flawed that way. I think this tool works better for Paypal scam sites, because with Paypal you do log in using your email address.

Still, the scammer has to open every individual email in order to check the contents, and that can't be a whole lot of fun! As they say, a needle in a haystack, indeed!

Little Mountain Goat · #35 Post by **Little Mountain Goat** » Thu Jan 12, 2006 12:59 pm

Had an ebay one last week, and two amazon ones this morning - I'm busy phishfighting in the background right now! the biggest giveaway for me was the fact that both of these came from the .com parts of the company, and I've only ever signed up with .co.uk. Hope the bastards get hit where it hurts most!