Never trust a link

Started by TehBorken, Sep 29 06 09:59

Previous topic - Next topic

TehBorken

      Never trust a link....this is some code contained in a phishing email I got today....mousing over the link makes it look like you're going to eBay...but some tricky HTML conceals the fact that you're actually going to the phisher's site. This is different from just making the text of the link different than the link itself and it's different than using jvascript to 'fake' the link- in this case the browser "confirms" that the link goes to eBay when it doesn't, all because of the LABEL tag.

I use FireFox, which usually doesn't fall for this kind of stuff but this is a new technique.Very tricky.
[span style="font-family: Times New Roman;"][/span][span style="font-family: Times New Roman;"][/span][br style="font-family: Times New Roman;"] [br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<P>[span style="color: rgb(255, 0, 0);"]<[/span][span style="font-weight: bold; color: rgb(255, 0, 0);"]A id=SPOOF [/span][/span][br style="font-family: Times New Roman; font-weight: bold; color: rgb(255, 0, 0);"][span style="font-family: Times New Roman; font-weight: bold; color: rgb(255, 0, 0);"]href=[/span][span style="color: rgb(255, 0, 0);"]vny!://www.talofa.com/xxx.html?SignIn&co_partnerId=2&pUserId=&siteid=0"[/span][span style="font-family: Times New Roman; color: rgb(255, 0, 0);"]></A></P> [/span][br style="font-family: Times New Roman;"] [br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<DIV><A [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]href=[/span][a style="font-family: Times New Roman;" class="txt-link-rfc2396E" href="vny!s://signin.ebay.com/ws/eBayISAPI.dll?SignIn&co_partner..."]"vny!s://signin.ebay.com/ws/eBayISAPI.dll?SignIn&co"[/a][span style="font-family: Times New Roman;"]> [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<TABLE> [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<CAPTION><A href=[/span][a style="font-family: Times New Roman; color: rgb(0, 0, 255); font-weight: bold;" class="txt-link-rfc2396E" href="vny!://www.ebay.com/"]"vny!://www.ebay.com/"[/a][span style="font-family: Times New Roman;"]>[span style="font-weight: bold; color: rgb(255, 0, 0);"]<LABEL for=SPOOF>[/span]<U [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]style="CURSOR: pointer; COLOR: blue">Review the submitted details [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]regarding the payment.</U></LABEL></A></CAPTION> [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<TBODY></TBODY></TABLE></A></DIV><BR></TD></TR> [/span][br style="font-family: Times New Roman;"] [br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<TR> [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]<TD>Regards,<BR>eBay International [/span][br style="font-family: Times New Roman;"][span style="font-family: Times New Roman;"]AG<BR></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></P> [/span]
             
The real trouble with reality is that there's no background music.

Sportsdude

"We can't stop here. This is bat country."

Gopher

Sportsdude, you are truly omniscient!
A fool's paradise is better than none.