Clan x86
Technical (Development, Security, etc.) => General Security Information => Topic started by: iago on May 04, 2007, 10:49:05 am
-
This is a pretty awesome social-engineering Trojan: http://www.symantec.com/enterprise/security_response/weblog/2007/05/ms_needs_your_credit_card_deta.html
Basically, it gives a very realistic interface saying that Windows needs your billing activation to re-activate. You can't enter task manager or anything. If you say no, your computer shuts down. If you say yes, you're required to enter a credit card number.
I thought this one was quite clever!
Image 1 (http://www.symantec.com/enterprise/security_response/weblog/upload/2007/05/Kardphisher1.jpg)
Image 2 (http://www.symantec.com/enterprise/security_response/weblog/upload/2007/05/Kardphisher2.jpg)
-
That is slick, the things I notice that make it look fraudulent are "your" not being capitalized in the second image, "Expiry date", having a colon after "Name on card" but nothing else, and...why would it require an ATM pin for Credit Card verification? Actually, how could they even use the ATM pin in a malicious way when they only have the CC information?
-
That's nice looking. :)
-
Not bad, but anybody that falls for this trick deserves it.
-
Not bad, but anybody that falls for this trick deserves it.
I disagree. That's a well-thought out trick that looks extremely realistic, and is something that people could believe that Microsoft would ask for. I can't depend on my grandma understanding the difference, and it's definitely not her fault if she enters the information.
-
Not bad, but anybody that falls for this trick deserves it.
I disagree. That's a well-thought out trick that looks extremely realistic, and is something that people could believe that Microsoft would ask for. I can't depend on my grandma understanding the difference, and it's definitely not her fault if she enters the information.
Then again, when it asks you to enter your ATM PIN number, that is pretty suspicious. Microsoft would have no need for your PIN number. I would never trust this.
I do believe that anybody that thinks that Microsoft would have a legitimate reason to have their PIN does indeed deserve to have their identity stolen. That's what I think--just my opinion.
The only reason anybody needs a PIN number is so that they can withdraw cash or use their credit card/debit card. What other reason would anybody need somebody else's PIN number? LOL.
-
Not bad, but anybody that falls for this trick deserves it.
I disagree. That's a well-thought out trick that looks extremely realistic, and is something that people could believe that Microsoft would ask for. I can't depend on my grandma understanding the difference, and it's definitely not her fault if she enters the information.
Then again, when it asks you to enter your ATM PIN number, that is pretty suspicious. Microsoft would have no need for your PIN number. I would never trust this.
I do believe that anybody that thinks that Microsoft would have a legitimate reason to have their PIN does indeed deserve to have their identity stolen. That's what I think--just my opinion.
The only reason anybody needs a PIN number is so that they can withdraw cash or use their credit card/debit card. What other reason would anybody need somebody else's PIN number? LOL.
Just because someone is ignorant on the subject of credit cards doesn't necessarily mean they deserve to be punished. I am sure there are many things you are ignorant about too, but I highly doubt you need punishment for you lack of knowledge.
-
Just because someone is ignorant on the subject of credit cards doesn't necessarily mean they deserve to be punished. I am sure there are many things you are ignorant about too, but I highly doubt you need punishment for you lack of knowledge.
Like life. :D
-
Then again, when it asks you to enter your ATM PIN number, that is pretty suspicious. Microsoft would have no need for your PIN number. I would never trust this.
I do believe that anybody that thinks that Microsoft would have a legitimate reason to have their PIN does indeed deserve to have their identity stolen. That's what I think--just my opinion.
The only reason anybody needs a PIN number is so that they can withdraw cash or use their credit card/debit card. What other reason would anybody need somebody else's PIN number? LOL.
I'm glad you're so educated. Not everybody is.
But yeah, the "PIN Number" field does go a little too far...