Contact
About Avira
Press
Beta test
Language:
English
English
Deutsch
Français
Español
Italiano
Português
Русский
For Home
Avira Antivirus Premium
Avira Internet Security
For Business
Client/Servers
Avira Professional Security
Avira Server Security
Avira Business Security Suite
Avira Endpoint Security
Small Business
Managed Services
Gateways
Avira AntiVir MailGate
Avira MailGate Suite
Avira AntiVir Exchange
Avira AntiVir WebGate
Avira WebGate Suite
Avira AntiVir GateWay Bundle
Avira AntiVir SharePoint
Integration
Anti-Malware SDK (SAVAPI)
Antispam SDK (SPACE)
Rebranding & Bundling
Integration Services
Educational Discount
Support
For Home
Overview
Latest News
Video Tutorials
Knowledgebase
For Business
Overview
Latest News
Knowledgebase
Virus Lab
Virus Descriptions
Statistics
VDF History
About Malware
Viruses In the Wild
Submit Suspicious File
Download
Product Downloads
Technical Documentation
Product Lifecycle
VDF Update
Partner
Partner Locator
Become an Avira Partner
Affiliate
Free
Download
Search
Summary
Full description
Statistics
Target:
Ebay
Date discovered:
12/10/2007
General
The goal is to get the following information:
• Credit card
• Ebay account
Phishing method:
• URL link
Email Details
From:
securitymeasures@ebay.com
Subject:
Security Measures
Visible link:
https://signin.eBay.com/ws/eBayISAPI.dll?SignIn&ru=http%3A//www...
Actual link:
http://www.ebay-us.land.ru/SignIn.html
IP address:
82.204.219.223
The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.
This screenshot is how the phishing email looks like:
Page Details
Visible URL:
http://www.ebay-us.land.ru/SignIn.html
Actual URL:
http://www.ebay-us.land.ru/SignIn.html
IP address:
82.204.219.223
The phishing page will look like the following:
Description inserted by Dominik Auerbach on Saturday, October 13, 2007
Back
.
.
.
.