Phucking Phishing

Aug 22, 2007 21:39

Coincidentally timed with some changes to my account info change comes this spoof email that appears to be from amazon payments and appears to have one of their very complex URLs complete with in-memory variable garbage just like Amazon's, but goes to a domain that begins www.amazon.com but doesn't end there, it's some URL like www.amazon.com.80C142.1014018.ty or something gross like that.

I have no idea why the IANN allows URLs like this to be registered in the first place.

In any case, this spoof website looks like Amazon's too (yay hyjacked HTML), and of course asks for me to login.

Thing is, my browser knows how to log in. The fact that it didn't here made me suspicious, but being stupid, I typed it in.

Then suddenly it went to a full account info page having blanks everywhere for credit card and bank information.

WHOA NELLIE!

That's where I pulled the brakes, went directly to amazon.com, logged in, and immediately changed my password. I did what I could to forward the spoof to amazon's fraud department. I can only hope they fry the perp like a piece of bacon on a hot griddle. Then maybe move on past their private parts after they're cooked.

phishing, fraud, rant, spoof

Previous post Next post
Up