forum.vdsworld.com

LiquidCode · Posted: Thu Aug 05, 2004 8:15 pm Post subject: New Scam - Warning!!

I got an email asking me to login to a Bank account using personal information. If you get an email with the subject "Online Banking Issue" or an email that has the url http://200.75.31.4/sys/ in it DO NOT GO TO IT AND ENTER INFORMATION!

vdsalchemist · Posted: Thu Aug 05, 2004 8:19 pm Post subject:

Yeah I got one of those too. I cannot remember which bank but I know I didn't have an account with that bank.

Skit3000 · Posted: Fri Aug 06, 2004 7:40 am Post subject:

They pretent to be the "usbank.com" website, because when you go to the url LiquidCode mentioned, it tries to send you to this website:

http://www.usbank.com(null character)@200.75.31.4/sys/verify.html

Because IE only displays the part before the null character, you don't see the @ which changes the first part into a "username" but which does forward you to 200.75.31.4/sys/verify.html...

FreezingFire · **Admin Team** Joined: 23 Jun 2002 Posts: 3508

This type of scam is quite common. It is known as a "phishing" scam.
There are countless variations of this type of scam, so please be sure
that you never follow a link from an e-mail that appears to be from your
bank, PayPal, or the like. Always type the address in yourself. If you want
to verify that you are at the right site, double-click the encryption icon in
Internet Explorer to view the details of the security certificate of the site.

I suggest that this topic be reverted into a sticky and after a day or so
reverted into a normal topic as the site does not appear to work anymore.

SnarlingSheep · Posted: Sun Aug 08, 2004 4:14 am Post subject:

FreezingFire · **Admin Team** Joined: 23 Jun 2002 Posts: 3508

That's interesting. Shocked

Still I think the best way to avoid this is to
type in the address manually into your browser.

Skit3000 · Posted: Sun Aug 08, 2004 8:26 am Post subject:

My virusscanner (McAfee) intercepts every HTML and/or link file while has the "(null character)@" combination in it... Smile

FreezingFire · **Admin Team** Joined: 23 Jun 2002 Posts: 3508

What is the null character's ASCII code? Is it 0x00 (pretty sure that's equivalent to @chr(0) )

Skit3000 · Posted: Sun Aug 08, 2004 3:38 pm Post subject:

Yes, the null character indeed is @chr(0) or 0x00 (or URI encoded: %00)... Smile