Comments | da_lj: phishing attempt: hey bank, don't help, OK?

da_lj

phishing attempt: hey bank, don't help, OK?

Nov 19, 2007 16:02

I received a phishing email at work from my bank (TD) which used a url-redirector at THE REAL BANK'S WEBSITE to get to the fake site ( Read more... )

wtf?, security

Comments 21

sachmet November 19 2007, 21:47:14 UTC

It's hardly even a new attack vector.

Idiots.

da_lj November 19 2007, 21:54:44 UTC

Damn right it's not new. :P

chezmax November 19 2007, 21:52:04 UTC

Did you write them, or call them?

da_lj November 19 2007, 22:07:51 UTC

Wrote them a little sumthin'.

chezmax November 19 2007, 21:53:29 UTC

The redirector appears to be gone now...

da_lj November 19 2007, 21:58:05 UTC

http://www.tdcanadatrust.com/servlet/com.td.infosite.servlet.OutBoundServlet?RequestedPage=http://finanz-checker.com/0009_Online/Form_Security/T_D_Secure/urgent_verifying/update.inf/

Still works. :/

chezmax November 19 2007, 22:08:03 UTC

I've sent an email to them regarding this.

da_lj November 20 2007, 01:56:47 UTC

Ha ha ha. They sent me a generic "it sounds like you're describing a phishing email. here's what phishing is. please send us the email and immediately delete it. thanks for telling us. and here's an ad for more financial services." *eye-roll*

Thread 11

secretsoflife November 19 2007, 22:05:40 UTC

seems to be fixed now.

secretsoflife November 19 2007, 22:06:55 UTC

haha, so wrong. it's totally still working :s

mynatt November 19 2007, 22:15:57 UTC

god, that's horrible! what idiots.