Absa Phish

Viruses, hackers and crackers
Forum rules
Post Reply
Screeper
Registered User
Posts: 3692
Joined: 04 Apr 2003, 02:00
Contact:
Contact Screeper

Absa Phish

Post by Screeper »

Morning guys,
Got this email in my gmail account this morning. An exceptionally good phish I must say...

Dear Customer

Absa Bank have been receiving complaints from our Customers
about unauthorised use of their Online Bank Accounts.
As a result we periodically review certain Customers' Accounts and temporarily restrict access
to those which we think are vulnerable to unauthorised use.

This message has been sent to you from Absa Bank because
we have noticed some invalid login attempts into your account.
Due to this we are temporarily limiting and restricting
your account access until we confirm your identity.

To confirm your identity and avoid limitations to your Online Banking Access,
Please click on the button below

http://www.absa.co.za/
Thank You.

Legal Advisor
Absa Bank.
When you hover over the 'verification' link it shows http://newlook.co.za/absa.co.za/ib.html
An exact replica of Absa's login page. Just the one frame that you require to put in your details in is fake the rest of it links directly to Absa's official site.

What I was wondering was:
1) How they got my email address? I'm not an Absa customer so how would the phish'ers know that myname@gmail.com belongs to a South African user?
2) the http://newlook.co.za looks like a legit site, have the phish'ers hacked and taken over the domain or would they just put up a fake site (with quite a bit of detail)?
Last edited by Screeper on 08 Jan 2010, 11:14, edited 1 time in total.
There are 10 types of people in this world.
Those who understand binary and those who do not.
Top
Sojourn
Registered User
Posts: 5649
Joined: 02 Sep 2004, 02:00
Location: Still looking...

Re: Absa Phish

Post by Sojourn »

you probably used that e-mail addr on a south african site somewhere to register where they bought it, or you posted it in a forum?
As for the domain use... methinks they are probably in cahoots with them.
Top
User avatar
Prime
Registered User
Posts: 27729
Joined: 01 Mar 2004, 02:00
Location: Getting into trouble
Contact:
Contact Prime

Re: Absa Phish

Post by Prime »

Got this too. For Absa and I am with sb. :?
Top
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:
Contact doo_much

Re: Absa Phish

Post by doo_much »

It's already been taken down. ;)
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
Top
D3PART3D
Starbound's Dear
Posts: 16295
Joined: 01 Dec 2004, 02:00
Contact:
Contact D3PART3D

Re: Absa Phish

Post by D3PART3D »

Me too. Can't remember using my email addy anywhere dodge though.
Ceterum autem censeo Samsung Mobile esse delendam.

When something is important enough, you do it even if the odds are not in your favor.
- Elon Musk
Top
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:
Contact doo_much

Re: Absa Phish

Post by doo_much »

Prime wrote:Got this too. For Absa and I am with sb. :?

Guess that's why it's called phishing. They just had the wrong type of bait for you. :D
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
Top
Sojourn
Registered User
Posts: 5649
Joined: 02 Sep 2004, 02:00
Location: Still looking...

Re: Absa Phish

Post by Sojourn »

In Prime's case they should have had links to transsexual gay midget websites.
Fast easy money, he falls for it everytime. Srsly.
Last edited by Sojourn on 08 Jan 2010, 11:11, edited 1 time in total.
Top
KillerByte
G3AR Staff Member
Posts: 5790
Joined: 08 Mar 2003, 02:00
Location: PCFormat HQ
Contact:
Contact KillerByte

Re: Absa Phish

Post by KillerByte »

i recieve those mails often. Some very good attempts so I usually try login with fake details just to mess them around.
What I type has nothing to do with the people that employ me.
Top
Screeper
Registered User
Posts: 3692
Joined: 04 Apr 2003, 02:00
Contact:
Contact Screeper

Re: Absa Phish

Post by Screeper »

doo_much wrote:It's already been taken down. ;)
Still up for me. Just cleared my cache and it's still loading the screen.
KillerByte wrote:i recieve those mails often. Some very good attempts so I usually try login with fake details just to mess them around.
Yes I get them often as well, but usually to my work email. The fact I found slightly puzzling was that it was a south african specific phish and they somehow knew my that my gmail address was from a South african user.
I guess like Sojourn said they could've picked/hacked it up from an SA registered site that I was registered on for some reason. Although I'm really careful with my email address.. hmm.. not careful enough it appears.
There are 10 types of people in this world.
Those who understand binary and those who do not.
Top
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:
Contact doo_much

Re: Absa Phish

Post by doo_much »

Interesting.

Can anyone else still access that page?
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
Top
Frozenfireside
Registered User
Posts: 2618
Joined: 26 Apr 2007, 02:00
Location: Westcliff, Johannesburg
Contact:
Contact Frozenfireside

Re: Absa Phish

Post by Frozenfireside »

KillerByte wrote:i recieve those mails often. Some very good attempts so I usually try login with fake details just to mess them around.
dude srsly those darth vader account details are pssn me off proper. Im trying to do an honest days phishing and you are messing me around...what the hell?

Joking...crackers before I get banned for being a smart bottom.
Soon Google will know everything...including how to divide by zero :(
Image
Top
User avatar
Ron2K
Forum Technical Administrator
Posts: 9050
Joined: 04 Jul 2006, 16:45
Location: Upper Hutt, New Zealand
Contact:
Contact Ron2K

Re: Absa Phish

Post by Ron2K »

WHOIS on the domain
Kia kaha, Kia māia, Kia manawanui.
Top
doo_much
Registered User
Posts: 26022
Joined: 13 May 2004, 02:00
Location: Getting there...
Contact:
Contact doo_much

Re: Absa Phish

Post by doo_much »


Did that first. Mailed Noise Hosting and they replied that they'd taken it down.
MOOD - Thirsty

A surprising amount of modern pseudoscience is coming out of the environmental sector. Perhaps it should not be so surprising given that environmentalism is political rather than scientific.
Timothy Casey
Top
KALSTER
Forum Moderator
Posts: 5439
Joined: 12 Oct 2008, 02:08

Re: Absa Phish

Post by KALSTER »

Got a few of those as well. Can't really muck them around too much. You can though with those idiots that mail you about some money they have to get out of their country and that they'd give you a certain percentage for helping them do it. Then when they have swindled you out of large sums of money with the promise of lots in return they disappear. I love to correspond with them for a while and take them on a wild goose chase before sending one final large in your face and f*** you email.
"It is the mark of an educated mind to be able to entertain a thought without accepting it." - Aristotle
Intel i5 2500; AsRock Z77 Extreme 4; Asus GTX580; 4x 2GB DDR3 1333; Intel 520 240GB SSD + 2x WD 3TB + 2TB Samsung; Samsung 22X DVD/RW; 23" LG W2343T-PF; Huntkey 700W
Top
Screeper
Registered User
Posts: 3692
Joined: 04 Apr 2003, 02:00
Contact:
Contact Screeper

Re: Absa Phish

Post by Screeper »

doo_much wrote:Interesting.

Can anyone else still access that page?
I can't access it anymore.
Was accessing it at work so even though I cleared my browser cache our proxy server could've still cached it for a while..
There are 10 types of people in this world.
Those who understand binary and those who do not.
Top
Hman
Registered User
Posts: 28520
Joined: 06 Oct 2003, 02:00
Processor: Intel i5 650
Motherboard: Asus P7H55-M LX
Graphics card: Gigabyte 7850 2GB OC
Memory: 8GB Kingston DDR3
Location: In my skin
Contact:
Contact Hman

Re: Absa Phish

Post by Hman »

I got it too, but I deleted it the instant I saw it.
"Every thinking man is a drinking man."


Member of the Barberton Tigers
Top
Anthro
Moderator Emeritus
Posts: 5547
Joined: 21 Dec 2002, 02:00
Processor: i7 3770k
Motherboard: ASUS P8P67-Pro
Graphics card: 2xNvidia GTX670
Memory: 16 GB Gskill Sniper
Location: In SQL Space inserting 'null' on purpose
Contact:
Contact Anthro

Re: Absa Phish

Post by Anthro »

Should ABSA not contact one *Person's name and address*?
I got it too :P blocked that domain from my email server immediately lol
Temporary Absence
Top
User avatar
Tribble
Registered User
Posts: 88465
Joined: 08 Feb 2007, 02:00
Processor: Intel Core i7-4770K CPU@3.50GHz
Motherboard: ACPI x64-based PC
Graphics card: GeForce GTX 780 Ti
Memory: 16GB
Location: Not here
Contact:
Contact Tribble

Re: Absa Phish

Post by Tribble »

I get them daily - just ignore them.
Image
Top
Frozenfireside
Registered User
Posts: 2618
Joined: 26 Apr 2007, 02:00
Location: Westcliff, Johannesburg
Contact:
Contact Frozenfireside

Re: Absa Phish

Post by Frozenfireside »

I got 5 yesterday!!! :(
Soon Google will know everything...including how to divide by zero :(
Image
Top
User avatar
Prime
Registered User
Posts: 27729
Joined: 01 Mar 2004, 02:00
Location: Getting into trouble
Contact:
Contact Prime

Re: Absa Phish

Post by Prime »

Sojourn wrote:In Prime's case they should have had links to transsexual gay midget websites.
Fast easy money, he falls for it everytime. Srsly.
Yeah, well after that experience with your momma, I keep hoping for more videos of her. :)

*keep on topic - BOTH of you... - jee*
Top
Hman
Registered User
Posts: 28520
Joined: 06 Oct 2003, 02:00
Processor: Intel i5 650
Motherboard: Asus P7H55-M LX
Graphics card: Gigabyte 7850 2GB OC
Memory: 8GB Kingston DDR3
Location: In my skin
Contact:
Contact Hman

Re: Absa Phish

Post by Hman »

I see they've got a new url
"Every thinking man is a drinking man."


Member of the Barberton Tigers
Top
Post Reply

Return to “Security”