Allied Irish Bank 1 - Phishing

See also

Summary

Full description

Target:	Allied Irish Bank
Date discovered:	13/04/2008

General The goal is to get the following information:
• Bank account

Phishing method:
• URL link

Email Details From: info@aib.ie
Subject: Safety and integrity of the AIB

Visible link: https://aibsistem/internetbanking.aib.ie/hb1/roi/presign.htm
Actual link: https://copper.phpwebhosting.com/~aibsistem/internetbanking.aib.ie/...
IP address: 70.86.34.18

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: https://copper.phpwebhosting.com/~aibsistem/internetbanking.aib.ie/...
Actual URL: https://copper.phpwebhosting.com/~aibsistem/internetbanking.aib.ie/...
IP address: 70.86.34.18

The page contains the following trick:
•The website is installed on a HTTPS server.

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Tue, 15 Apr 2008 16:04 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back