22nd November 2004

egold

egold <donotreplay@e-gold.com>

egold account investigation

HTML

Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.

Yes

http://www.ultracashier.com/..../index2.htm

1. A new and highly dangerous phishing scam targeting egold (www.egold.com). As well as a very professional looking scam email, the spoof website it links too also looks very professional, and exploits a flaw in Microsoft's Internet Explorer browser to quite literally REPLACE the browser address bar with a functioning replacement, that hides the real URL of the spoof website and disguises it as egold.com.

2. Email claims to be from egold asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.

3. egold never send users emails requesting details in this way.

3. URL traced to a server in Dallas,USA.

4. URL disguised as: https://www.e-gold.com/acct/login.html

5. URL looks secure (https) but is not - any information you enter will be sent unencrypted across the web, as well as straight into the hands of the phishers.