Internet Explorer phish bug, works with https, ie paypal

[fatkorean]

I looked up phish, ie, explorer, bug, internet and didn't come up with anything so hope this isn't a repost..

Well I was browsing another forum and I saw this. Its kinda scary if you have IE...

here is the link

-fk

edited to add another link... https://www.paypal.com

 

[Ns1]

i don't get it

 

[fatkorean]

click that link, then click the symantec link in the "fake" email. then look at your address bar, also look at the status bar if you have it on ie and hold your mouse over the link. Then right click on the page and goto properties.. what do you see?

Can you imagine if it was paypal? or your bank?

-fk

 

[Occifer]

Wow, hopefully there's a patch for this soon or it could really mess some people up!

 

[fatkorean]

wow no one really seems to care morning bump?

 

[jfall]

/me gets ready to see a lot more of those ebay/paypal update credit card information e-mails.

That is crazy, thanks for the info

 

[fatkorean]

wow.. afternoon noone cares bump

 

[WobbleWobble]

Wow! And there's no way of telling if the site you're being direct to is real or not.

Good find.

 

[Ameesh]

hmm thats pretty nasty, but the status bar shows the correct thing

 

[tk149]

:Q:Q:Q

That would have fooled me 10 out of 10 times!

 

[Platypus]

begin countdown to firebird zealots

 

[ClueLis]

Originally posted by: CorporateRecreation
begin countdown to firebird zealots

You make it sound like that's a bad thing. 😛

 

[fatkorean]

bump because no one cares and this could be potentially very bad bug

 

[iamme]

uh oh, this looks like it could be bad.

 

[konichiwa]

yeah...

 

[Pepsi90919]

repost.

 

[PrincessGuard]

MyIE2 isn't fooled 🙂

Edit: I take that back. Proxomitron will show the whole address but MyIE2 itself won't.

 

[Adul]

thank god for other real browsers 😉

 

[fatkorean]

How is this a repost? I posted this on 12/11/2003 12:46 AM
and you posted this on 12/11/2003 12:38 PM

???

-fk

 

[gwlam12]

Originally posted by: fatkorean
bump because no one cares and this could be potentially very bad bug

maybe ppl care but dont have anything to say about it.

 

[jimmyhaha]

> browsing another forum

lol... shhh... don't tell anyone.

http://www.dslreports.com/forum/remark,8749872~root=security,1~mode=flat

see application of use of this with credit card in below

http://forums.anandtech.com/messageview.cfm?catid=40&threadid=1203871

 

[kranky]

Unless they can come up with a way to squash this, I think it could be very bad. Even n00bs don't reply to spam any more, but they will click links.

I don't know if this would work in an email, though.

<edit> removed stupid question 😉 </edit>

 

This has been done with paypal, so I don't have to imagine it.

Redirects are as old as html. If you get hit by one, you deserve it.

 

[CaffeineAndStuff]

Opera gives the following in a dialog - even better than firebird IMO:
Security warning:

You are about to go to an address containing a username.

Username: www.paypal.com

Server: secure.divo.net

Are you sure you want to go to this address?

 

[ViRGE]

Originally posted by: SammySon
This has been done with paypal, so I don't have to imagine it.

Redirects are as old as html. If you get hit by one, you deserve it.

It's not a redirect - read up, it's far worse than that.