[Full-Disclosure] US Bank scam

This is the best phishing scam I've seen yet:
http://www.bis1bp.com/a12/index.html

I have Windows Server 2003 fully patched and this works. The program fakes an address bar so this
would pass through most people's safety check, after all the address bar clearly has the correct
address.

There are bugs in the code, for example, all your Internet Explorer windows will now have this
address, but again for most people would only have one window open.

                
__________________________________
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Tue Jun 15 13:44:55 2004