Autor: Bogdan Turcanu

IT

BancPost nu ia nici o masura impotriva phishing-ului

Bogdan Turcanu

Incepand cu 22 decembrie 2008 primesc zilnic mail-uri cu subiectul: „Bancpost va informeaza”, iar la expeditor „BancPost Fastbanking”. Adresa web a link-ului din corpul mesajului duce la http://201.30.116.135/fastbanking/.  La adresa respectiva suntem intampinati de un formular identic cu cel al aplicatiei de Internet Banking al bancii BancPost. Adresa la care se trimit datele din formularul respectiv este: http://201.30.116.135/security/fastbanking.bancpost.ro/iBankWeb/index.php M-am gandit sa le servesc cateva inregistrari in baza de date omuletilor respectivi facand un scriptulet ca cel de mai jos: #!/usr/local/bin/bash COUNTER=0 while [  $COUNTER -lt 100000 ]; do echo – fetch http://201.30.116.135//security/fastbanking.bancpost.ro/iBankWeb/index.php?user=teste&pass=1234 let COUNTER=COUNTER+1 done Sper ca am reusit sa…

IT

Phishing BancPost

Bogdan Turcanu

  Tocmai ce am primit pe mail mesajul de mai jos ( am pus toata sursa):   Return-Path: <fastbanking@bancpost.ro> X-Original-To: bogdan@bogdanturcanu.ro Delivered-To: bogdan@bogdanturcanu.ro Received: from localhost (localhost [127.0.0.1]) by mail.bogdanturcanu.ro (Postfix) with ESMTP id 0641A2788B2 for <bogdan@bogdanturcanu.ro>; Mon, 22 Dec 2008 10:56:06 +0200 (EET) Received: from mail.bogdanturcanu.ro ([127.0.0.1]) by localhost (master.bogdanturcanu.ro [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dg1q6YWZsQIM for <bogdan@bogdanturcanu.ro>; Mon, 22 Dec 2008 10:56:02 +0200 (EET) Received: from dc.pctoa.com (wsip-24-234-122-121.lv.lv.cox.net [24.234.122.121]) by mail.bogdanturcanu.ro (Postfix) with ESMTP id BFE252788B0 for <bogdan@bogdanturcanu.ro>; Mon, 22 Dec 2008 10:55:58 +0200 (EET) Received: from nousanat.static.otenet.gr [85.72.44.86] by dc.pctoa.com with SMTP; Mon, 22 Dec…