REPORT SUMMARY
Date Reported
17th January 2004
Apparent Sender
Yahoo
Subject
POSSIBLE
UNAUTHORIZED
ACCESS IN TO YOUR
YAHOO
ACCOUNT!!Secure
Yahoo
Senders Address
(spoofed)
Secure Yahoo
(secure@yahoo.com)
Content
text with a disguised
link to forged
Yahoo web pages
(see image)
Spoofed Web page/site?
Yes
Web page/site
content
forged Yahoo sign in
page and web form
requiring
name &
address
details, credit card & verification numbers, etc
Web page/site origin
URL
http://
2yahoo.com.co.nr/
Identity Theft method
Web form
information
is captured by the
scammers using
a PHP script stored
at http://w45621.com
while you are
redirected to a
genuine Yahoo page
More...
Latest
email
scam
See our guide to
phishing scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
POSSIBLE UNAUTHORIZED ACCESS IN TO YOUR YAHOO ACCOUNT!! Secure Yahoo - Email Scam
17th January 2004
Faced with a possible Unauthorised Access to your Yahoo Account, would you fall for this scam ...
This email takes the form of a text message with a link (see images below) which is disguised (using HTML code) to make you believe that it will lead to a genuine yahoo.com web page. If you use that link, you will actualy arrive at a forged web page ...
The forged page that is linked to is hosted at http://2yahoo.com.co.nr/ which is a sub domain of co.nr which is registered to an individual in St Petersburg, Russia and is hosted by Cenpac in Nauru Island. Clearly nothing to do with Yahoo Inc.
We also found that the form data was being processed using a PHP script stored at http://w45621.com which is registered to an individual in the USA and hosted by Interland which is a hosting service based in Atlanta, Georgia, USA.
If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
Take a good look at the following images, because this email scam may be coming to an inbox near you!
The Email ...
The first forged web page...
 |
 |
 |
 |
The second forged web page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||||
