New phishing tactic falling through the net

[Greg Krzeszkowski]

Is this in any way similar to the emails I've been receiving lately that are constructed like :

few words that may make an intelligible sentence

<some link to a profile of some woman who wants to have sex with me>

some more words that are pretty much unintelligible

Cheers

Greg
-----Original message-----
From: Julian Field MailScanner at ECS.SOTON.AC.UK
Date: Tue, 22 Feb 2005 23:05:25 +1100
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: New phishing tactic falling through the net

> Message.pm patch attached which implements this trap. That was a
> toughie, took me 45 minutes!
>
> Julian Field wrote:
>
> > Interesting one, hadn't thought of that trick. I'll have a think.
> >
> > John Wilcock wrote:
> >
> >> How about this one, Julian?
> >> (adapted from a phish I just received, detected by ClamAV as it happens)
> >>
> >>> <a href="http://www.example.com/">
> >>> <map name="mymap"><area coords="0,0,100,100" shape="rect"
> >>> href="http://www.phisher.com/"></map>
> >>> <img src="whatever" usemap="#mymap"></a>
> >>
> >>
> >
> > --
> > Julian Field
> > www.MailScanner.info
> > Buy the MailScanner book at www.MailScanner.info/store
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> > ------------------------ MailScanner list ------------------------
> > To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> > 'leave mailscanner' in the body of the email.
> > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> > Support MailScanner development - buy the book off the website!
> >
>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>


--------------------------
Greg Krzeszkowski
Director, Infrastructure and Applications Development Practice
InfoSec Solutions
0411 154 261

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!