[Full-Disclosure] US Bank scam

[David Lederman <delphi4pro@xxxxxxxxx>]

This is the best phishing scam I've seen yet:
http://www.bis1bp.com/a12/index.html

I have Windows Server 2003 fully patched and this works. The program fakes an 
address bar so this
would pass through most people's safety check, after all the address bar 
clearly has the correct
address. 

There are bugs in the code, for example, all your Internet Explorer windows 
will now have this
address, but again for most people would only have one window open.




                
__________________________________
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html