[linux-elitists] Go phish

Greg Folkert greg@gregfolkert.net
Sun Oct 31 13:02:51 PST 2004


On Sun, 2004-10-31 at 12:56 -0600, Rob McGee wrote:
> Phriends, here it is, the business opportunity of the 21st Century:  
> good old-phashioned misrepresentation fraud ... illegal in most 
> jurisdictions worldwide, yes ... but with a little high-tech twist YOU 
> TOO can phind your phortune in phishing.
> 
> I phound a phishy message in one of my old POP3 accounts a week ago. 
> Usually I don't even look at them, but I did look at the headers of 
> this one, and I saw that it was coming phrom my very own co-lo 
> provider, Hurricane Electric (he.net) in Phremont, Caliphornia USA.
> 
> I didn't like the sound of that. When people blacklist all of he.net 
> they blacklist me. So I reported it to abuse at the phisher's domain, 
> risingwire.com, and to he.net.
> 
> Note again, this isn't just plain spam, this is criminal phraud. Phour 
> phine pholks posted this phish:
> http://groups.google.com/groups?oi=djq&as_q=risingwire.com
> 
> The night I got it I had some phun with the payload URL, which was a 
> very convincing-looking phake of a Paypal page ...
> URL='http://www.paypal.com%00@mein.digitalkamera.de/DKFM/index.htm'
> while true ; do
>   wget -O- "$URL" &> /dev/null
>   COUNT=$(($COUNT +1))
>   echo -n ${COUNT}\  # whitespace for readability
> done

Rob, dam good idea. I get those Phaux-CitiBanhk ones. I got one this
morning and happen to see this e-mail...

Setup a machine at home and work to do similar. Within an hour the site
was "over-bandwidth". Aw shucks.
-- 
greg, greg@gregfolkert.net

The technology that is
Stronger, better, faster:  Linux
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://allium.zgp.org/pipermail/linux-elitists/attachments/20041031/5e25f533/attachment.pgp 


More information about the linux-elitists mailing list