Anti phishing information (phighting phishing ?)



Well, after the early week experience with getting a Bank of the West site taken down, I’ve taken on two more which have come in today. One of these was an ebay spoof, the other paypal. In both cases I’ve emailed the appropriate abuse address on the owners network (this time one is in China, I think the second was as well.) I did find out something neat about paypal and ebays ways of reporting.

One great congratulations to paypal for this nice, clear direction. If you think that you have received a fraudulent email (or fake website), please forward the email (or URL address) to spoof@paypal.com and then delete the email from your mailbox. Never click any links or attachments in a suspicious email.

What I really like about this is that people that CAN identify the URL can go ahead and save them the legwork of researching it. I like that. Some companies tell you to forward it exactly as you receive it and don’t want you to do anything else. They also don’t let you give any other information, which to me is frustrating.

With ebay, I’m not as enthused with their structure for this, but they do give a web form at their security center ( http://pages.ebay.com/securitycenter/ ). Unfortunately you do have to log in to finalize things. Which means if you’re not an ebay user, you’re out of luck. They do give three different fields to fill in. 1) Message headers 2) message body 3) comments.

Personally, I have not yet seen it as effective to go after the sending IP’s for the phishing emails unless I’m getting flooded from one IP. It seems to be more effective to go after the website address as I’ve seen several emails refer to the same address.

Related Posts

Blog Traffic Exchange Related Posts
  • There aren't THAT many phish in the sea, more on phighting phishing The last post, I got sidetracked into another idea as I was doing a google search. Not uncommon. OK, what I was curious about is how many phishing sites are estimated to be "in the wild" at any given moment threatening to defraud viewers? Well, my search did turn up......
  • What a week.... I think it's time to pass along a long story of what's gone on over the last week or so here and some of the reasons there hasn't been anything posted. Generally, I would say that work has been busy, but something happened last week that went a bit beyond......
  • The spammers win a round There is a company (well, unfortunately, WAS a company) called Blue Security. They had an innovative approach to stopping spam. A small download essentially sent opt-out return emails that were junk back to the REAL spam sender (clever concept huh? bouncing to the person that REALLY sent the message... Of......
Blog Traffic Exchange Related Websites
  • 10 Easy Steps For Selling Products On EBay In this article we will go over 10 simple steps to selling products on eBay as a home business. It is a one of the really good free easy ways to make money online. I will offer some helpful information so you can sell your products and start making money.......
  • Review of eBay Developers Program blog This is a review of the eBay Developers Blog. One of the things that set blogs apart from news listings is the ability to interact with the readers, and their ability to interact back. Even a corporate blog should have the capability for readers to post comments to posts. Not......
  • Zopa Security Leak? (This security leak was plugged in under 24 hours from reporting... Luke from Zopa confirmed fix in comments at the end of the post. This note was added after the security leak was fixed.) I was randomly checking my stats on Zopa and noticed that a person with whom I......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site