Phishing article WTF



  • One of our national newspapers ran an article about a phishing scam that exploits a recent terrorist attack, supposedly passing a link to the "terrorist video" from said newspaper, when in fact it is a phishing site. (they just changed eluniversal.com.mx to el-universal.no-ip.org).

    However, when they show the phishing link... they actually made the URL an actual link to the phishing site. I wonder how many suckers will end up clicking that link?



  •  All the more convenient to Megaloader (LOL HIJACKED) Gigaloader (LOL /b/'ED) BounceLoader (LOL DOWN) MakeLoveNotSpam (LOL SUNSETTED) ... damn, where did all those "destroy their bandwidth" engines go?



  • "Filed under: Heavy object duct-taped to the F5 key?" My, that's refreshing.<input name="ctl00$ctl00$bcr$bcr$ctl00$PostList$ctl03$ctl23$ctl01" id="ctl00_ctl00_bcr_bcr_ctl00_PostList_ctl03_ctl23_ctl01_State" value="value:Filed%20under%3A%20%3Ca%20href%3D%22%2Ftags%2FHeavy%2Bobject%2Bduct-taped%2Bto%2Bthe%2BF5%2Bkey_3F00_%2Fdefault.aspx%22%20rel%3D%22tag%22%3EHeavy%20object%20duct-taped%20to%20the%20F5%20key%3F%3C%2Fa%3E" type="hidden">


  • This is cool:

    /Users/mehaase $ nslookup el-universal.no-ip.org
    Server:		192.168.1.1
    Address:	192.168.1.1#53
    
    Non-authoritative answer:
    Name:	el-universal.no-ip.org
    Address: 0.0.0.0
    


  • @savar said:

    This is cool:

    /Users/mehaase $ nslookup el-universal.no-ip.org
    Server:		192.168.1.1
    Address:	192.168.1.1#53
    

    Non-authoritative answer:
    Name: el-universal.no-ip.org
    Address: 0.0.0.0

    Hm... either the phishers got 0wned, the domain's been suspended/redirected to that addy, or these "1337 phishers" did what I call "a Moxy".

    Moxy was a guy who put up his own "internet radio station", then passed everyone this URL: http://10.1.54.157/... which worked with those using the same IP (cable ISP's over here use NAT) but was useless for those of us with real ISP's. When I pointed out this fact, he set up one of those DDNS domains, but still couldn't get the idea: moxy.sytes.net was still pointing to 10.1.54.157.

    Sheesh.



  • @danixdefcon5 said:

    @savar said:

    This is cool:

    /Users/mehaase $ nslookup el-universal.no-ip.org
    Server:		192.168.1.1
    Address:	192.168.1.1#53
    

    Non-authoritative answer:
    Name: el-universal.no-ip.org
    Address: 0.0.0.0

    Hm... either the phishers got 0wned, the domain's been suspended/redirected to that addy, or these "1337 phishers" did what I call "a Moxy".

    Moxy was a guy who put up his own "internet radio station", then passed everyone this URL: http://10.1.54.157/... which worked with those using the same IP (cable ISP's over here use NAT) but was useless for those of us with real ISP's. When I pointed out this fact, he set up one of those DDNS domains, but still couldn't get the idea: moxy.sytes.net was still pointing to 10.1.54.157.

    Sheesh.

    lern2nslookup

     

    The address is 0.0.0.0   The private IP is the dude's DNS server.



  • @morbiuswilters said:

    lern2nslookup

     

    The address is 0.0.0.0   The private IP is the dude's DNS server.

    That's what makes it even funnier. 0.0.0.0 is the original loopback address, or the default gateway, depending on how its interpreted.


  • this reminds me of an incident in japan, with the popular television series pokemon. one battle scene had full screen flashing red and blue, which triggered HUNDREDS of seizures in kids. then, the evening news reported on the event by REPLAYING THE WHOLE CLIP.



  •  @Gorgapor said:

    this reminds me of an incident in japan, with the popular television series pokemon. one battle scene had full screen flashing red and blue, which triggered HUNDREDS of seizures in kids. then, the evening news reported on the event by REPLAYING THE WHOLE CLIP.

     

    it's all about primary sources though.

     

    at least there isn't a media slant in japan hehe.



  • @Gorgapor said:

    this reminds me of an incident in japan, with the popular television series pokemon. one battle scene had full screen flashing red and blue, which triggered HUNDREDS of seizures in kids. then, the evening news reported on the event by REPLAYING THE WHOLE CLIP.
    Hehe. I was surprised that the scaremongering media didn't make a huge fuzz about it when Pokemon came over to the American continent. You know, like "the phantom from Three Men and a Baby", or the Garbage Pail Kids cartoon. By then it seems most people had forgotten that incident.


Log in to reply