A phishing email
Results 1 to 2 of 2

Thread: A phishing email

  1. #1
    Join Date
    Apr 2000
    Location
    Friern Barnet, London, England
    Posts
    46,554

    A phishing email

    This is a genuine phishing email that I recieved, I thought it might be educational to show the things that give it away.

    Dear E-gold valued member,

    Due to concerns, for the safety and integrity of the E-gold
    account we have issued this warning message.

    It has come to our attention that your account information needs
    to be updated due to inactive members, frauds and spoof reports.
    If you could please take 5-10 minutes out of your online experience and renew
    your records you will not run into any future problems with the online service.
    However, failure to update your records will result in account suspension
    This notification expires on 48.

    Once you have updated your account records your E-gold account
    service will not be interrupted and will continue as normal.

    Please follow the link below and login to your account
    and renew your account information
    https://www.e-gold.com/acct/login.html

    Sincerely,
    E-gold customer department!
    A couple of things gave it away though. Firstly, the grammatical mistakes:

    "This notification expires on 48" (speaks for itself)

    "E-gold customer department!" (surely this should be "customer services" - and why the exclamation mark?).

    No professional organisation would allow an email to be sent with those kinds of mistakes.

    But the real clincher, is when you right-click on the email and choose "View source". Here is what that link actually is:

    <p><a href="http://70.86.163.37/e-gold/" target="_blank">
    https://www.e-gold.com/acct/login.html</a></p>
    For anyone not familiar with HTML code, it displays "https://www.e-gold.com/acct/login.html", which to all intents and purposes is a genuine secure website. But it actually takes you to the non-secure (and unknown) "http://70.86.163.37/e-gold" (the page has benn removed already, so don't bother looking to see what's there).

    Always check where links really take you on any email that you have even the remotest suspicion about.

    Another good tip, is to enter false details, such as your password, on any page that you get taken to - a genuine site will reject it, but a phishing site will happily accept what you enter, as it cannot know your real details.
    Nick.

  2. #2
    Join Date
    Apr 2000
    Location
    Friern Barnet, London, England
    Posts
    46,554
    Here is the full HTML source code:

    A
    <table cellSpacing="0" cellPadding="0" width="600" align="center" border="0">
    <tr vAlign="top">
    <td><a href="https://www.e-gold.com/gif/logo.gif="_blank">
    <img alt="E-gold" src="https://www.e-gold.com/gif/logo.gif" border="0" width="255" height="35"></a>
    </td>
    </tr>
    </table>
    <table cellSpacing="0" cellPadding="0" width="100%" border="0">
    <tr>
    <td width="100%" background="https://www.e-gold.com/gif/logo.gif">
    <img height="29" src="https://www.e-gold.com/gif/logo.gif" width="1" border="0"></td>
    </tr>
    <tr>
    <td>
    <img height="10" src="https://www.e-gold.com/gif/logo.gif" width="1" border="0"></td>
    </tr>
    </table>
    <table cellSpacing="0" cellPadding="0" width="600" align="center" border="0">
    <tr vAlign="top">
    <td width="400">
    <table cellSpacing="0" cellPadding="5" width="600" border="0">
    <tr vAlign="top">
    <td width="590">
    <table cellSpacing="0" cellPadding="0" width="100%" border="0">
    <tr>
    <td class="pp_heading" align="left"> </td>
    </tr>
    </table>
    </td>
    </tr>
    <tr>
    <td class="pptext" width="590">Dear E-gold valued member,<br>
    <br>
    Due to concerns, for the safety and integrity of the E-gold<br>
    account we have issued this warning message.<br>
    <br>
    It has come to our attention that your account information needs<br>
    to be updated due to inactive members, frauds and spoof reports.<br>
    If you could please take 5-10 minutes out of your online experience and
    renew<br>
    your records you will not run into any future problems with the online
    service.<br>
    However, failure to update your records will result in account
    suspension <br>
    This notification expires on 48.<br>
    <br>
    Once you have updated your account records your E-gold account<br>
    service will not be interrupted and will continue as normal.<br>
    <br>
    Please follow the link below and login to your account<br>
    and renew your account information
    <p><a href="http://70.86.163.37/e-gold/" target="_blank">
    https://www.e-gold.com/acct/login.html</a></p>
    <p>Sincerely,<br>
    E-gold customer department!</td>
    </tr>
    <tr>
    <td width="590">
    <table cellSpacing="0" cellPadding="0" width="100%" border="0">
    <tr>
    <td class="pp_footer"><font color="#c0c0c0" size="2">Please do not
    reply to this e-mail. Mail sent to this address cannot be answered.
    For assistance, </font><font size="2">
    <a href="https://www.e-gold.com/acct/login.html" target="_blank">
    <font color="#c0c0c0">log in</font></a><font color="#c0c0c0"> to
    your E-gold account and choose the "Help" link in the footer of any
    page.<br>
    <br class="h10">
    To receive email notifications in plain text instead of HTML, update
    your preferences </font>
    <a href="https://www.e-gold.com/gif/logo.gif" target="_blank">
    <font color="#c0c0c0">here</font></a></font><font color="#c0c0c0" size="2">.
    </font></td>
    </tr>
    <tr>
    <td>
    <img height="10" src="https://www.e-gold.com/gif/logo.gif" width="1" border="0"></td>
    </tr>
    </table>
    </td>
    </tr>
    </table>
    </td>
    </tr>
    </table>

    </body>

    </html>
    Nick.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •