One I haven't seen yet....

***Tiger Shark*** · September 27th, 2004, 06:55 PM

... But I don't get any of these.....

This was sent to my CEO via email.

Code:

&lt;!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"&gt;
&lt;HTML&gt;&lt;HEAD&gt;
&lt;MAP 
name=FPMap0&gt;&lt;AREA shape=RECT coords=0,0,567,270 
  href="http://%32%31%31%2E%39%37%2E%32%34%38%2E%36%30:%38%37/%63%7A/%69%6E%64%65%78%2E%68%74%6D"&gt;&lt;/MAP&gt;
&lt;META content="MSHTML 6.00.2800.1458" name=GENERATOR&gt;&lt;/HEAD&gt;
&lt;BODY&gt;
&lt;DIV&gt;&lt;FONT face=Tahoma size=2&gt;&lt;SPAN class=972050716-27092004&gt;I believe this is 
one of your scams!&lt;/SPAN&gt;&lt;/FONT&gt;&lt;FONT face=Tahoma size=2&gt;-----Original 
Message-----&lt;BR&gt;&lt;B&gt;From:&lt;/B&gt; CITIZENS BANK 
[mailto:[email protected]]&lt;BR&gt;&lt;B&gt;Sent:&lt;/B&gt; Monday, September 
27, 2004 2:00 AM&lt;BR&gt;&lt;B&gt;To:&lt;/B&gt; CEOs Name Here&lt;BR&gt;&lt;B&gt;Subject:&lt;/B&gt; URGENT 
SECURITY NOTIFICATION&lt;BR&gt;&lt;BR&gt;&lt;/FONT&gt;&lt;/DIV&gt;
&lt;P&gt;&lt;FONT face=Arial&gt;&lt;A 
href="http://www.citizensbank.com/customerservice/cust_serv_gtway.asp"&gt;&lt;IMG 
src="cid:part1.03030709.05070303@[email protected]" 
useMap=#FPMap0 border=0&gt;&lt;/A&gt;&lt;/A&gt;&lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&lt;FONT color=#fffff7&gt;it's beautiful engine Fun into account But we do have in 
1899 of WEATHER in 1903 It's a pleasure Outlaw Star Attila the Hun Dale 
Earnhardt Destiny's Child Metasearch Groundhog Day Dogs in 1965 Easter Dale 
Earnhardt The X-Men Newspapers Good. in 1922 in 1821 Mariah Carey 
&lt;/FONT&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;

What I found interesting is that the whole email is the href, (it's a mapped picture), so the apparent href appears to be valid but the real href you are sent to is encoded in line 4....

It would catch the semi-literate..... I had to look at it twice.... :o

Thread: One I haven't seen yet....

Thread Tools

Display

Threaded View

One I haven't seen yet....

Posting Permissions