Ohio Savings Bank 1 - Phishing

See also

Summary

Full description

Target:	Ohio Savings Bank
Date discovered:	06/06/2006

General The goal is to get the following information:
    • Bank account
    • Credit card

Phishing method:
    • 'text' link

Email Details From: customerservice@ohiosavins.com
Subject: Ohio Savings Bank Security Issue

Visible link: Login
Actual link: http://restore.oohiostatesavins.us/.login/
IP address: 69.34.35.3

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: https://www.ohiosavings.com/OnlineBanking/authenticate.asp
Actual URL: http://restore.oohiostatesavins.us/.login/
IP address: 69.34.35.3

The page contains the following trick:
• Forged address bar

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Tue, 06 Jun 2006 15:32 (GMT+1)
Description updated by Dominik Auerbach on Tue, 06 Jun 2006 15:33 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back