faux-Amazon phishing

[memegarden]

I just got a particularly diabolical email which purports to be from Amazon.com, notifying me of suspicious activity on my account and asking me to confirm my identity to keep my account active. Clicking on the link brings up a login page that looks like Amazon's, with a URL that passes at a quick glance. Entering a (false) username & password

Comments

[jehannamama]

Glad you caught it!
We get those all the time, proportedly from ebay.

[singingnettle]

Yuk.

[omnifarious]

I make up new email addresses for all the places I do business with. Invariably phishing people don't send the email to the one specific to the business, so I can always catch them.