Spot the phishing attempt!

Viruses, hackers and crackers
Post Reply
User avatar
Ron2K
Forum Technical Administrator
Posts: 9050
Joined: 04 Jul 2006, 16:45
Location: Upper Hutt, New Zealand
Contact:

Spot the phishing attempt!

Post by Ron2K »

Received this lovely little mail purporting to be from ABSA (gmail spam filter didn't flag it).

Now, assuming you bank with ABSA, how would you tell that it's a phishing attempt? :wink:
from: ABSA. info@notify.msg.za via home.pl
to: [my e-mail address]
date: 11 January 2012 22:15
subject: You have a new Private Message
mailed-by: home.pl

Dear Customer,

Attention! Your ABSA online banking access has been
violated. We suspected someone other than you with
IP 126.370.42.86 trying to access your informations.

Please verify your banking information with us to show
that you are not currently away.
You have to verify this as soon as possible to prevent
your online bank account from getting blocked

Verify your Access


This email was sent from ABSA secure server
and is done for your protection.
(Note: the actual e-mail didn't link to Google -- I changed that for reasons that I hope are obvious.)
Kia kaha, Kia māia, Kia manawanui.
KALSTER
Forum Moderator
Posts: 5439
Joined: 12 Oct 2008, 02:08

Re: Spot the phishing attempt!

Post by KALSTER »

The non-ABSA email addresses and the poor grammar ("informations")?
"It is the mark of an educated mind to be able to entertain a thought without accepting it." - Aristotle
Intel i5 2500; AsRock Z77 Extreme 4; Asus GTX580; 4x 2GB DDR3 1333; Intel 520 240GB SSD + 2x WD 3TB + 2TB Samsung; Samsung 22X DVD/RW; 23" LG W2343T-PF; Huntkey 700W
jee
Registered User
Posts: 19336
Joined: 03 Jun 2003, 02:00
Location: a hole so deep...

Re: Spot the phishing attempt!

Post by jee »

home.pl? Since when is ABSA using a Poland mail server?
"Integrity" and "integer" both contain a Latin root meaning "whole; complete." The root sense, then, is that people may be said to be acting with integrity when their beliefs, words, and actions have a sense of unity or wholeness.
User avatar
hamin_aus
Forum Moderator
Posts: 18363
Joined: 28 Aug 2003, 02:00
Processor: Intel i7 3770K
Motherboard: GA-Z77X-UP4 TH
Graphics card: Galax GTX1080
Memory: 32GB G.Skill Ripjaws
Location: Where beer does flow and men chunder
Contact:

Re: Spot the phishing attempt!

Post by hamin_aus »

home.pl might also be the perl script that generated the email.
Image
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:

Re: Spot the phishing attempt!

Post by doo_much »

Mine for today.

Dear FNB Account Holder,

There is a pending transfer into you FNB account for security reasons and the OTP Telephone number
associated with your account. we would require you to confirm your account status and profile on
file with us before this transfer can be completed.

This can done using the reference below.

https://www.fnb.co.za/ --> Links to http://cameraeducation.net/wp-includes/pomo/default.php

Please accept our apologies for any inconvenience this action may have caused

Yours sincerely,
Online Customer Service
First National Bank
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
User avatar
hamin_aus
Forum Moderator
Posts: 18363
Joined: 28 Aug 2003, 02:00
Processor: Intel i7 3770K
Motherboard: GA-Z77X-UP4 TH
Graphics card: Galax GTX1080
Memory: 32GB G.Skill Ripjaws
Location: Where beer does flow and men chunder
Contact:

Re: Spot the phishing attempt!

Post by hamin_aus »

Seems legit.
Image
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:

Re: Spot the phishing attempt!

Post by doo_much »

jamin_za wrote:Seems legit.
I doubt it. No-one ever pays money into my accounts! :lol:
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
User avatar
Ron2K
Forum Technical Administrator
Posts: 9050
Joined: 04 Jul 2006, 16:45
Location: Upper Hutt, New Zealand
Contact:

Re: Spot the phishing attempt!

Post by Ron2K »

None of you lot picked up the rather interesting IP address in my one?

Forum, I am disappoint...
Kia kaha, Kia māia, Kia manawanui.
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:

Re: Spot the phishing attempt!

Post by doo_much »

Ron2K wrote:None of you lot picked up the rather interesting IP address in my one?

Forum IT dweebs, I am disappoint...

Fixed that for you.

Care to enlighten the rest of us?
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
User avatar
Ron2K
Forum Technical Administrator
Posts: 9050
Joined: 04 Jul 2006, 16:45
Location: Upper Hutt, New Zealand
Contact:

Re: Spot the phishing attempt!

Post by Ron2K »

Each octet in an IPv4 address has a 0-255 range.

Unless you're playing Uplink.
Kia kaha, Kia māia, Kia manawanui.
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:

Re: Spot the phishing attempt!

Post by doo_much »

My apologies. Even an uninformed pillock such as myself should have noticed that. :oops:
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
User avatar
KatrynKat
Insane in the Membrane
Posts: 24490
Joined: 18 Jul 2010, 17:42
Location: In my BDSM dungeon - aka Lockdown

Re: Spot the phishing attempt!

Post by KatrynKat »

don't worry Oom Doo...
to me it looked like just another IP address...

how should i know the rules and diffs of IP addresses...
"This eBook is displayed using 100% recycled electrons."
User avatar
Stuart
Lead Forum Administrator
Posts: 38503
Joined: 19 May 2005, 02:00
Location: Home

Re: Spot the phishing attempt!

Post by Stuart »

Ron2K wrote:None of you lot picked up the rather interesting IP address in my one?

Forum, I am disappoint...
I actually did notice that. But it was my third observation, behind . . .

(1) common sense; and
(2) info@notify.msg.za
Image
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:

Re: Spot the phishing attempt!

Post by doo_much »

KatrynKat wrote:don't worry Oom Doo...
to me it looked like just another IP address...

how should i know the rules and diffs of IP addresses...
I actually finished 2 1/2 years of a BSc-IT degree... double :oops:
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
User avatar
hamin_aus
Forum Moderator
Posts: 18363
Joined: 28 Aug 2003, 02:00
Processor: Intel i7 3770K
Motherboard: GA-Z77X-UP4 TH
Graphics card: Galax GTX1080
Memory: 32GB G.Skill Ripjaws
Location: Where beer does flow and men chunder
Contact:

Re: Spot the phishing attempt!

Post by hamin_aus »

doo_much wrote:I actually finished 2 1/2 years of a BSc-IT degree...
Hmmm, IIRC you'd still be doing a bunch of applied Maths courses and would barely have touched anything IT related at that stage n the degree :P
Image
jee
Registered User
Posts: 19336
Joined: 03 Jun 2003, 02:00
Location: a hole so deep...

Re: Spot the phishing attempt!

Post by jee »

I saw the IP in bold, but my knowledge is a bit limited on those :(
"Integrity" and "integer" both contain a Latin root meaning "whole; complete." The root sense, then, is that people may be said to be acting with integrity when their beliefs, words, and actions have a sense of unity or wholeness.
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:

Re: Spot the phishing attempt!

Post by doo_much »

You mean we'd been taught to 'program' in Java (using a notepadlike inteface - no wysiwig) and VB (not .Net - it had been around for a while but our lecturer didn't know it) and done some life skills stuff? Yes.

But we were also expected to be converse with Binary and Hex...

As a matter of interest - dropped out because of 2nd year maths and a lecturer who stated, and I quote "I cannot explain this to you, it is something you must 'feel'(aanvoel)..."

This after I got 89% for first year maths. :|
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
Post Reply