Need help? Ask the community or hire an expert.
Go to Avira Answers
Target:National Credit Union Administration
Date discovered:24/05/2006

 General The goal is to get the following information:
     Bank account


Phishing method:
     URL link

 Email Details From: boardmail@ncua.gov
Subject: Activation of your account

Visible link: http://www.ncua.gov/activate_account.html
Actual link: http://www.gn-bank.com/fcu/
IP address: 216.49.233.32


The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
     The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: https://www.fcu.gov/cgi-bin/webscr?cmd=_activate-ru
Actual URL: http://www.gn-bank.com/fcu/
IP address: 216.49.233.32


The page contains the following trick:
     Forged address bar


The phishing page will look like the following:




Description inserted by Dominik Auerbach on Thursday, May 25, 2006
Description updated by Dominik Auerbach on Tuesday, June 6, 2006

Back . . . .