PDA

View Full Version : Phishing company can't spot attack?



jdong
November 26th, 2005, 07:02 PM
http://lxer.com/module/newswire/view/48530/index.html#threadlist

following up on the article... Look at test item 9 and the explanation: http://www.mailfrontier.com/quiztest2/answers/why_q9.html


Their "correct" answer is that #9 is a legitimate e-mail... Upon examination we can obviously see that this is a fake. First, note the bfi0.com in the status bar. Upon examination:



$whois bfi0.com
...
...
Registrant:
BIG FOOT
263 Ninth Avenue - 10th Floor
NEW YORK, NY 10001
US

Domain Name: BFI0.COM

Administrative Contact, Technical Contact:
Interactive Inc., Bigfoot unixops@bigfootinteractive.com
315 Park Ave.
18th Floor
New York, NY 10010
US
212-995-7500 fax: 212-995-7514


Sound like CapitalOne to you? Doesn't to me either. http://capitalone.bfi0.com/ is a blank page.

Let's cause an error: http://capitalone.bfi0.com/TR3434234525?

Would one of the largest banking firms of the USA do that? No!


So, back to the claim:


According to data from e-mail security firm MailFrontier, only 4 percent of users can spot a phished e-mail 100 percent of the time.


Gee, I wonder why :)