[ale] Fraud? [Fwd: Visa Security Update]

Stephen Touset stephen at touset.org
Fri Dec 5 14:16:45 EST 2003


Hrm...looking around even MORE, I found out that when you go to that 
URL, it actually takes you a VISA page. I assume, then, that the page 
attempts to exploit a vulnerability in some browser(s) to allow the 
theft of credit card information by you simply visiting the page and it 
instantly redirecting you to a VISA one.

Stephen Touset wrote:

> Looking around more, I see that the link *doesn't* actually go to Visa's 
> website, but Mozilla takes me there anyways. However, the actual URL 
> goes to:
> 
> http://www.visa.com%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20:UserSession%3D2f6q9uuu88312264trzzz55884495&usersoption%3DSecurityUpdate&StateLevel%3DGetFrom@61.252.126.191/verified_by_visa.html 
> 
> 
> Also, the headers of the email show that it came from the United 
> Kingdom. So yeah, this is a scam. Just one that doesn't work in Firebird.
> 
> Stephen Touset wrote:
> 
>> This email absolutely reeks of fraud. There are grammar mistakes, the 
>> layout is boring, but bad, etc. However, when you click on the link, 
>> it actually takes you to Visa's website. I'm almost certain that this 
>> is a scam, but everything checks out so far. Has anyone else gotten 
>> one of these, and is it legit?
>>
>> ------------------------------------------------------------------------
>>
>> Subject:
>> Visa Security Update
>> From:
>> Visa International Service <security at visa-security.com>
>> Date:
>> Fri, 05 Dec 2003 21:54:33 -0500
>> To:
>> stephen at touset.org
>>
>>
>>
>> *Dear Customer,
>>
>> Our latest security system will help you to avoid possible fraud 
>> actions and
>> keep your investments in safety.
>>
>> Due to technical security update you have to reactivate your account
>>
>> Click on the link below to login to your updated Visa account.
>>
>> To log into your account, please visit the Visa Website at
>>
>> http://www.visa.com <http://www.visa.com 
>> :UserSession=2f6q9uuu88312264trzzz55884495&usersoption=SecurityUpdate&StateLevel=GetFrom at 61.252.126.191/verified_by_visa.html> 
>>
>>
>> We respect your time and business.
>> It's our pleasure to serve you.
>>
>>
>> * Please don't reply to this email. This e-mail was generated by a 
>> mail handling system.
>>
>>
>>
>>
>> Copyright 1996-2003, Visa International Service Association. All 
>> rights reserved.
>>
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://www.ale.org/mailman/listinfo/ale
> 
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale



More information about the Ale mailing list