Target:MidAmerica Bank
Date discovered:16/09/2006

 General The goal is to get the following information:
    • Bank account
    • Credit card


Phishing method:
    • 'text' link

 Email Details From: customercare@midamericabank.com
Subject: NEW MESSAGE FROM MID AMERICA BANK

Visible link: Renew Now
Actual link: http://www.store.uk.com/catalog/hb.exe/session_id.php
IP address: 85.234.132.66


The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
    • The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: http://www.store.uk.com/catalog/hb.exe/log_into.htm
Actual URL: http://www.store.uk.com/catalog/hb.exe/log_into.htm
IP address: 85.234.132.66


The phishing page will look like the following:



说明添加者： Dominik Auerbach 打开 2006年9月16日星期六

反馈 . . . .

© 2013 Avira Operations GmbH & Co. KG. 保留所有权利.

我的帐户

https:// 为了你的安全，此窗口已加密。