Phishing: Charter One Bank

***SirDice*** · April 5th, 2005, 05:03 PM

Hmm. I received an email from Charter One Bank asking me to confirm my customer details. Funny thing is... I don't use that bank... Attached is a picture of the email.

Source shows it had been send through some cable ISP in Canada.
The "link" inside is uses a <map> to actually send you to http://custconf.com:880

Code:

&lt;html&gt;&lt;p&gt;&lt;font face="Arial"&gt;
&lt;A HREF="https://www.charteronebank.com/general/custdetailsconfirmation.asp"&gt;
&lt;map name="HM0EG3wPJ"&gt;
&lt;area coords="0, 0, 651, 332" shape="rect" href="http://custconf.com:880"&gt;&lt;/map&gt;
&lt;img SRC="cid: part1.00020603.06000909@support_ref_...teronebank.com" border="0" usemap="#HM0EG3wPJ"&gt;
&lt;/A&gt;&lt;/a&gt;
&lt;/font&gt;&lt;/p&gt;&lt;p&gt;&lt;font color="#FFFFF8"&gt;I'd like Cheer up! Dale Earnhardt O-Town it's for you. &lt;/font&gt;&lt;/p&gt;&lt;/html&gt;

custconf.com resolves to an IP address in Korea....

I smell a Phish!

Thread: Phishing: Charter One Bank

Thread Tools

Display

Threaded View

Phishing: Charter One Bank

Posting Permissions