Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: [HV-PAPER] Anti-Phishing Tips You Should Not Follow
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Sun, 02 Apr 2006 11:08:33 +1200

michaelslists () gmail com wrote:

Tip #2: Invalid credentials work on impersonated websites.

If you feel there is something wrong with a website, use invalid
username and invalid password to log in. If the website then presents you
with the "Logon failed" page, you are possibly on a legitimate website, so
you may proceed with logging in using your correct credentials. If it gets
you right through - it is definitely a phishing attempt. "



There was a series of phish a while back (early last year was the last 
I think saw one of these) where the phisher seemed to be aware of this 
possible tactic, and always "failed" the first login (and always 
accepted the second no matter what you put, including exactly the same 
(bogus) credentials).


Nick FitzGerald

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]