Need help? Ask the community or hire an expert.
Go to Avira Answers
Target:Paypal
Date discovered:30/05/2006

 General The goal is to get the following information:
     Credit card
     Personal data
     Paypal account
     Email account


Phishing methods:
     URL link
     'text' link

 Email Details From: service@intl.paypal.com
Subject: Notification of Limited Account Access

Visible link: Resolution Center
Actual link: http://rds.yahoo.com/_ylt=A0LaSV66fNtDg.kAUoJXNyoA;_ylu=...
IP address: 213.91.246.16


The email is designed to avoid detection from Antispam and Antiphishing. Such techniques are:
     The Subject of the email contains random characters.
     The Body of the email contains random characters.
     The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: http://farin.bg/~test/secure/cgi-bin/webscrcmd_login.php
Actual URL: http://farin.bg/~test/secure/cgi-bin/webscrcmd_login.php
IP address: 213.91.246.16


The phishing page will look like the following:



Description inserted by Dominik Auerbach on Tuesday, May 30, 2006

Back . . . .