Phishing Trip

Why do we always pick on Denmark?

Yes, Virginia, even plain text emails can be like the North Atlantic in December…

Note the generic "Dear Customer" and the poor grammar.

Yes, the bogus link is not hidden this time. This is either a really dumb phisherman or is praying his recipients are naive guppies.

 

However, www.konverce.com is NOT nstarcu.org so that should be your first warning that something is smelly in Denmark.

It appears that the konverce.com site was hacked and a page was setup to look like the credit union site. The page no longer exists, however, you can’t be sure that you are safe to check these URL’s,  Should your browser have no restrictions set on it, just going to one of these sites can get you in to all sorts of ugly messes. There could be scripts on the site that will kick off the second the page loads. I do not let scripts run in my browser; I pick and choose which scripts I will allow, especially if I have never been to the site before or if the site is notorious for pop-ups or ads.

Moving to the all-telling header we find this:

mailstore.freecom.net has nothing to do with either konverce.com or the credit union.

If you want to check to see whether an email you received is a phishing attempt you can check this site: http://www.phishtank.com/

Yours in pessimism

Leave a Reply

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image