[JCAddy]

oooo very cool Thomas.

[Mihai]

I'm 99% sure my dad would

You can't be serious.

If someone walked up to him on the street and handed him a sheet of paper with blanks for ALL of his valuable information...are you saying that you think he'd fill it out for them?

Environment is the deciding factor here In computer land, some people act like monkeys on LSD, everything presented to them is a great mystery, and instructions must ofcourse always be followed. Computers are very intimidating.

But really, these things are understandable. How would they expect something like this, when they just understood what an email and attachment is. If it says bank of america on the email, then it must be bank of america that contacted them, and gave them instructions.

[JDHill]

I guess that somewhere...way down deep in the back of my mind...I know you're right. And it hurts me to know.

What is it about these machines that has the power to turn normal, reasonable people into...well, something else? I can't imagine there were these kind of problems when they invented the postal system...all of a sudden people get an official-looking letter, and they instantly mail away the deed to their house in a self-addressed-stamped-envelope. Then again...maybe that did happen.

You know, I seem to find myself saying 'sheesh' alot these days.


@Thomas: I don't use Firefox (why do I always have the urge to type Foxfire? ) too much, so I'm still on v1.0.4, which didn't give a warning like that...I wonder how many other times it's been reported. I did check on the IP, and all I could find was that it was based in Taiwan...I only got one positive in the spam databases, and that was an entire IP block listing, so it wasn't specific to this IP. I'd be curious to know where Firefox got the info.

[ivox3]

I don't think it got the info, but rather has some kind of URL analysis. There are just some things that are irregular, ...like having to route to some server in Taiwan for a US domestic financial instituion. All pretty easy to filter out ...

...just speculating.

There's just something so wrong about this address ..

[JDHill]

URL analysis

just way too many directions to go with that one, aren't there...

[ivox3]

okay, ... that gets a LMAO. ...becuase, .. I truly am. lol.

[mverta]

What stopped me right away was the capital Y in "Confirm Your Bank of America..." You can save yourself from 99% of phishing schemes by looking for 3rd grade grammar mistakes. My favorite part about Generation Illiterate is that I can see their criminal activities coming a mile away.

_Mike

[Neil Evans]

Classic. I don't know of anyone falling for this but a guy who used to work for me fell for the Nigerian scan, he was desperate for cash I guess, drug habit to feed. After he left I kept getting wierd calls from men with names Mr Mobutu!! They took some getting rid of!

[Thomas An.]

Hello Jeremy,

Thank your feedback in regards to our phish service. We work hard to ensure flawless customer experience as possible. We apologize in the issues you encountered and that you were not successfully conned. We will look to improve our service in the future.

Since our automated online form did not work for you, we will be happy to assist you manually. Please provide us with your actual account number and bank institution and we will process your con request as soon as possible.

Best Regards,
Suzan
Customer Support

[JCAddy]

Hello Jeremy,

Thank your feedback in regards to our phish service. We work hard to ensure flawless customer experience as possible. We apologize in the issues you encountered and that you were not successfully conned. We will look to improve our service in the future.

Since our automated online form did not work for you, we will be happy to assist you manually. Please provide us with your actual account number and bank institution and we will process your con request as soon as possible.

Best Regards,
Suzan
Customer Support

HAH, where was this from?

[JDHill]

[ivox3]

Do the right thing.

[JDHill]

haha...got another one...different scammer though -->



Not as clever, but more effective, the whole message is just an image linking to the scammer's site...have a look at the source, and you get:

<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.2800.1522" name=GENERATOR></HEAD>
<BODY bgcolor="#FFFFF7" text="#955505">
<a HreF=http://www.bankofamerica.com.onlinebank ... ession.cgi>
<img src="cid:ZT7HJBZ4P7" border=0></a>
</p><p><font color="#FFFFF1">easy. cloakroom club "Ian pulled backward with furious strength, and Hezekiah moaned fearfully.</font></p><p><font color="#FFFFFB">She said she had hardly been able to believe that her patient was really that Paul Sheldon even after checking the ID in his wallet. You may be naive about the world of books and publishing, but not that naive. ""After I found one of my bobby-pins in the lock? There were three locks on the door. no, you're dead. I knew writers were supposed to have big egos, but I guess I didn't understand that meant ingratitude, too! Suppose the ole lady guessed Misery was a leftover of her fuck-'em-and-leave-'em days andHe put the pen down, looked at the paper, then slowly picked the pen up again and scrawled a few more lines. complementation</font></p>
</BODY>
</HTML>

...now in case you don't understand the code, the color="#FFFFF1" on both the BODY and p elements gives the text the same color as the background. The invisible text is just there to get the message through your spam filter. A quick Google will show you that the text is just a snippet scraped from some page with a Stephen King reprint...but it may just as well be from a random blog somewhere.

Punks.

So here's a free idea for someone who has the time: write a spam filter that grabs a random section of the message text, hits Google, and kicks the email if it finds a verbatim match in the first 10 pages.