LaSalle Bank 5 - Phishing

See also

Summary

Full description

Target:	LaSalle Bank
Date discovered:	10/11/2007

General The goal is to get the following information:
    • Bank account
    • Personal data

Phishing method:
    • URL link

Email Details From: customerservice@lasallebank.com
Subject: Important Notice - Account Data Confirmation Required!

Visible link: https://onlinebanking.lasallebank.com/efs/servlet/efs/login2.jsp?...
Actual link: http://www.freewebs.com/data-confirmation/www.lasallebank.com/...
IP address: 204.2.183.2

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.freewebs.com/data-confirmation/www.lasallebank.com/...
Actual URL: http://www.freewebs.com/data-confirmation/www.lasallebank.com/...
IP address: 204.2.183.2

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Sat, 10 Nov 2007 12:10 (GMT+1)
Description updated by Dominik Auerbach on Sat, 10 Nov 2007 12:12 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back