??? wrote:
Check at the top of this E-trade Phishing site:
http://196.1.161.115/e/t/user/login/
On Wed, 30 Aug 2006, Steve Thomas wrote:
That's brilliant. Looks like there's a creative grey-hat out there somewhere.
Also interesting - the login form itself is a flash app. I haven't seen
that before (but I don't check many of them out, either...).
I didn't notice that login form, but then I have the flashblock
firefox extension, so it didn't load. I was wondering why
they'd have a phishing web site with no login form...
My guess is that the flash login form is an easy way to collect
the data, send it off somewhere else, then pass it through to
the real site.
- Logan
