Page 1 of 2 12 LastLast
Results 1 to 15 of 27
  1. #1
    3 Star Lounger
    Join Date
    Dec 2001
    Location
    Schenectady, New York, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Want to give your money away

    I received one of the "I'll Empty Your Bank Account" scams this morning. The entire image is a hyperlink and was the only thing visible. I happened to highlight the entire message and the data after the image appeared. Anyone know what this is and if it can be used for tracing where this <img src=/w3timages/censored.gif alt=censored border=0> came from.
    Attached Images Attached Images
    Don
    <img src=/S/flags/USA.gif border=0 alt=USA width=30 height=18> <img src=/S/flags/NewYork.gif border=0 alt=NewYork width=30 height=18> "Life on Earth is expensive, but at least it includes a free trip around the Sun."

  2. Subscribe to our Windows Secrets Newsletter - It's Free!

    Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!

    Excel 2013: The Missing Manual

    + Get this BONUS — free!

    Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!

  3. #2
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Email, I presume? It's a phishing scam, probably the best thing to do is to forward it to US Bank and advise them of it. I'm sure they would have a vested interest in finding out who's behind it. You might also want to pop over here: http://www.antiphishing.org/
    -Mark

  4. #3
    3 Star Lounger
    Join Date
    Dec 2001
    Location
    Schenectady, New York, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Thanks Mark,

    Yes it came in an email and I knew it was a scam but I was wondering what the trailing data was since it was hidden and only appeared when I highlighted the entire area.

    I'll check out the site you sent and if there is a USBANK connected to BancCorp, I'll forward it to them.

    Have a nice day.
    Don
    <img src=/S/flags/USA.gif border=0 alt=USA width=30 height=18> <img src=/S/flags/NewYork.gif border=0 alt=NewYork width=30 height=18> "Life on Earth is expensive, but at least it includes a free trip around the Sun."

  5. #4
    5 Star Lounger
    Join Date
    May 2002
    Location
    43.8N 81.0W, Ontario
    Posts
    815
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Should/could this thread be moved to the Spyware - Antivirus - Safe Computing forum?

    Have a Great day!!!
    Ken
    <IMG SRC=http://www.wopr.com/w3tuserpics/KenK_sig.gif>

  6. #5
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    5,016
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    I may be barking up the wrong tree here, but all that junk at the end might be one of those attempts to fool filters. I've heard of this technique, of generating random data strings, to make each such message "unique" so that the whole scam can't be blocked by applying a simple filter or killfile. From what you say, the actual message is a URL followed by this random string, so that each such post pumped out will, in fact, be a different message.

    Alan

  7. #6
    3 Star Lounger
    Join Date
    Dec 2001
    Location
    Schenectady, New York, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Thanks Allan,

    That would explain why I'm getting more and more of this and my email filters are missing them.
    Don
    <img src=/S/flags/USA.gif border=0 alt=USA width=30 height=18> <img src=/S/flags/NewYork.gif border=0 alt=NewYork width=30 height=18> "Life on Earth is expensive, but at least it includes a free trip around the Sun."

  8. #7
    3 Star Lounger
    Join Date
    Dec 2001
    Location
    Schenectady, New York, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Yes, Ken you're right. It should have gone there but when I first posted it I was thinking about the ending string and not about warning people about this scam. I just figured that anyone using Woody's Lounge would know better than to fall for this scam.

    (Perhaps Mark could move it there.)
    Don
    <img src=/S/flags/USA.gif border=0 alt=USA width=30 height=18> <img src=/S/flags/NewYork.gif border=0 alt=NewYork width=30 height=18> "Life on Earth is expensive, but at least it includes a free trip around the Sun."

  9. #8
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    5,016
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Don,

    Is there anything common to the URLs/ hyperlnks that you could use for the purpose of filtering? e.g. do they all point to the same domain, or perhaps the first part of the DNS is the same? What about other headers, like Subject: line?

    Alan

  10. #9
    3 Star Lounger
    Join Date
    Dec 2001
    Location
    Schenectady, New York, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Alan,

    I haven't looked closely at these. I'm getting most of these at home and delete them right away. This one came to me at work where we have a great virus and worm protection so I thought I'd take a chance and look at it just to see if I could determine what was behind the image.

    I'll try to dissect some at home this week-end.

    Will post back on my findings.
    Don
    <img src=/S/flags/USA.gif border=0 alt=USA width=30 height=18> <img src=/S/flags/NewYork.gif border=0 alt=NewYork width=30 height=18> "Life on Earth is expensive, but at least it includes a free trip around the Sun."

  11. #10
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Want to give your money away

    If you open an HTML message in Outlook, you can right-click in a clear part of the body and choose View Source to see the HTML code. In Outlook Express, I don't remember, sorry.

    Naturally, it is better to be offline when opening suspicious mail, lest something get auto-downloaded onto your computer via an unpatched vulnerability in the Internet Explorer components of Windows that render HTML mail.

  12. #11
    3 Star Lounger
    Join Date
    Dec 2001
    Location
    Schenectady, New York, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Jefferson Thank you for the words of wisdom.

    I use Incredimail at home so I'm not sure if I can do the right click. But I'm getting a new PC next week so this is the time to experiment with the cra_ mail. (Everything I need to move to my new machine is already backed up to CDs.)

    Have a nice day.
    Don
    <img src=/S/flags/USA.gif border=0 alt=USA width=30 height=18> <img src=/S/flags/NewYork.gif border=0 alt=NewYork width=30 height=18> "Life on Earth is expensive, but at least it includes a free trip around the Sun."

  13. #12
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Want to give your money away

    I don't get very much Incredimail. SpamAssassin does not like it one bit. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>

  14. #13
    Bronze Lounger
    Join Date
    Nov 2001
    Location
    Arlington, Virginia, USA
    Posts
    1,394
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    For anyone interested, in Outlook Express, to see HTML source code for an email message, open msg (or select msg from message list), then select Properties from File menu. When Properties dialog opens, Select Details tab. The msg Internet Headers will be displayed in large box. Click "Message Source..." button to view message source in a separate window. The Message Source window will display the Internet Headings, followed by plain text content of msg, then, if applicable, the HTML source code (you'll probably have to scroll down to see HTML code, depending on length of msg). A Plain Text format msg will have no HTML source code to display. Note: I'm using OE version 6.00.2800.1123.

    Another option is, to save msg as HTML file, then open file in browser and view source code. There will be no "Save As HTML" file option for plain text messages.

    HTH

  15. #14
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Want to give your money away

    Just as a footnote to this very thorough set of options:

    When you save and open HTML format mail on your computer, there is a security risk, because you will be in your "My Computer" zone and any scripts or ActiveX code that were inactive in your mailbox (Restricted Sites zone) will then be able to run. Only save/open trusted HTML mail as .html, not suspicious HTML mail. If you want to save a suspicious message to your hard drive, use a nonexecutable file extension, like .txt, and open it in an "unaware" application like Notepad.

    For plain text, no worries.

  16. #15
    Bronze Lounger
    Join Date
    Nov 2001
    Location
    Arlington, Virginia, USA
    Posts
    1,394
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Want to give your money away

    Thanx for that pointing that out, I was just thinking of options for viewing the message source in general, obviously if msg is suspicious you would not want to open as HTML file before viewing source code. BTW, as for "Incredimail" (whatever that is), I would be very hesitent to use any email program capable of rendering HTML messages that did not provide a method for user to view message source code prior to actually opening msg.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •