Categorized | Software

Orkut Phishing Scam

So today when I logged into Thunder bird to check my email, what do I see but a notification from Orkut asking me to verify my account or else it will be deleted.

Boo-Hoo.

Same old phishing scams which seem to be a dime a dozen these days. The email is pasted below as it is:

============

Dear <my actual account name>,

Your orkut account is under consideration for temporarily deactivation due to unlimited invalid attempts to login. If you have forgot your password, click here. [actual link to Google]

If you feel this is wrong, it means somebody else has tried to gain invalid access to your account. For further inconvenience and security reasons, you are requested to verify your orkut account now. Please use the link given below for your account verification and login.

Click here to verify your orkut account. [The bait link comes here, and points to – http://orkutverifyuser.elementfx.com/google_accountsF3s2service3s2orkut/
support3Rorkut02httpsecurity2FRedirLogin.aspx3Fmsgh5D26pageFR2verify
accountF3R/login.aspx.htm]

If you are not verifying your account, it will be permanently deactivated as per our Terms of Service. [Actual link]

This is an automatically generated message, please do not reply.

* * *

To control notification emails, access your Account Settings:
http://www.orkut.com/Settings.asp [
Actual link]

=========

Note the incorrect URL – http://orkutverifyuser.elementfx.com

Earlier I had come across a slightly different variant of the same scam. I remember I had eagerly sat down to unravel the inner dynamics of it. Unlike the present one, the whole thing was pretty amateurish.

Basically anybody who knew the right websites and little bit of HTML could create a fake website with a form mailer on a shared domain host that allowed free hosting.

Using basic social engineering techniques, other users could be fooled into entering their details on the fake page, which would then do two things – mail the credentials to the script kiddie and redirect the unsuspecting victim to a genuine login failed page.

The scam had led to pretty intense ‘cyber war’ between the members India and Pakistan on Orkut with each group actively working at enticing the moderators of rival communities to click on links and enter their login credentials.

I tried studying the latest scam but the actual form which emails the credentials is in a .PhP file and has restricted access. [<form method=”POST” action=”FR2userverifyFR2codeD0ab2541gs23y6785.php”>] . Somebody sure went to great lengths to achieve the ISO in phishing, if ever there was one.

Summing It Up

The bad part first.

– The email contained my name as entered in the Orkut account. Usually fake emails contain something generic as Dear Orkut User etc. If the scammers have been able to harvest account names from Orkut, it could mean a potential breach of the site.

Good News

– The hosting service seems to have already disabled the account. If you enter the top level domain name in the browser that’s the message you get.

– Normally I use Firefox for personal browsing but for this link I specifically used IE. The installed anti virus on my laptop immediately found that the site was potentially dubious and gave me a warning.

    220 Responses to “Orkut Phishing Scam”

    1. Simply wanna input which you have a very decent web page, I much like the pattern it stands out there.

    2. payday loan says:

      Howdy just wanted to give you a quick heads up. The words in your article seem to be running off the screen in Ie. I’m not sure if this is a format issue or something to do with web browser compatibility but I thought I’d post to let you know. The style and design look great though! Hope you get the issue resolved soon. Cheers

    3. you use a wonderful weblog here! do you want to make some invite posts on my weblog?

    4. Hey there! Would you mind if I share your blog with my zynga group? There’s a lot of folks that I think would really appreciate your content. Please let me know. Many thanks

    5. payday loan says:

      First off I want to say fantastic blog! I had a quick question in which I’d like to ask if you don’t mind. I was curious to know how you center yourself and clear your thoughts prior to writing. I have had a difficult time clearing my mind in getting my thoughts out there. I truly do take pleasure in writing but it just seems like the first 10 to 15 minutes are generally lost just trying to figure out how to begin. Any ideas or tips? Many thanks!

    6. Just wish to say your article is as astounding. The clarity on your post is simply great and that i could think you’re a professional on this subject. Well together with your permission allow me to grab your RSS feed to stay updated with approaching post. Thanks 1,000,000 and please keep up the rewarding work.

    7. Its like you read my mind! You seem to grasp so much about this, such as you wrote the guide in it or something. I think that you simply could do with some % to drive the message house a little bit, however other than that, this is magnificent blog. An excellent read. I’ll definitely be back.

    8. Its like you read my mind! You appear to know so much about this, such as you wrote the book in it or something. I think that you just can do with a few p.c. to power the message house a bit, but other than that, that is wonderful blog. A fantastic read. I will certainly be back.

    9. Odell Hoell says:

      Very nice post. I absolutely appreciate this site. Keep writing!

    10. Some truly prize blog posts on this website , saved to my bookmarks.

    11. This design is steller! You certainly know how to keep a reader entertained. Between your wit and your videos, I was almost moved to start my own blog (well, almost…HaHa!) Excellent job. I really loved what you had to say, and more than that, how you presented it. Too cool!

    12. I really value your piece of work, Great post.

    13. I’m lucky that I found this internet page, precisely the right information that I was searching for!

    14. I view something really special in this web site.

    15. I’ve been exploring for a little for any high quality articles or weblog posts on this kind of space . Exploring in Yahoo I ultimately stumbled upon this web site. Reading this information So i am satisfied to express that I’ve an incredibly good uncanny feeling I came upon exactly what I needed. I such a lot undoubtedly will make sure to don?t overlook this website and give it a glance regularly.

    16. As I website possessor I believe the content matter here is rattling great , appreciate it for your efforts. You should keep it up forever! Best of luck.

    17. If you’re still on the fence: grab your favorite earphones, head down to a Best Buy and ask to plug them into a Zune then an iPod and see which one sounds better to you, and which interface makes you smile more. Then you’ll know which is right for you.

    18. An extremely fascinating read, I may possibly not concur completely, but you do make some very valid points.

    19. I think this site has some rattling wonderful info for everyone. “A man’s dreams are an index to his greatness.” by Zadok Rabinwitz.

    20. I don’t even know how I ended up right here, but I thought this submit was good. I do not recognize who you are however definitely you’re going to a famous blogger when you aren’t already 😉 Cheers!

    21. I like this web site its a master peace ! Glad I discovered this on google .

    22. Spot on with this write-up, I truly suppose this web site needs far more consideration. I’ll in all probability be once more to read much more, thanks for that info.

    Trackbacks/Pingbacks

    1. Superb website…

      […]always a big fan of linking to quality articles that I like but don’t get a lot of link love from[…]……

    2. Check this out…

      […] that is the end of this article. Here you’ll find some sites that we think you’ll appreciate, just click the links over[…]……

    3. Read was interesting, stay in touch……

      […]please visit the sites we follow, including this one, as it represents our picks from the web[…]……

    4. business101 says:

      Check this out…

      […] that is the end of this article. Here you’ll find some sites that we think you’ll appreciate, just click the links over[…]……

    5. Blogs ou should be reading…

      […]Here is a Great post You Might Find Interesting that we Encourage You to see[…]……

    6. You should check this out…

      […] Wonderful story, reckoned we could combine a few unrelated data, nevertheless really worth taking a look, whoa did one learn about Mid East has got more problerms as well […]……

    7. Websites you should visit…

      […]below you’ll find the link to some sites that we think you should visit[…]……

    8. Read was interesting, stay in touch……

      […]please visit the sites we follow, including this one, as it represents our picks from the web[…]……

    9. Visitor recommendations…

      […]one of our visitors recently recommended the following website[…]……

    10. Websites we think you should visit…

      […]although websites we backlink to below are considerably not related to ours, we feel they are actually worth a go through, so have a look[…]……

    11. You should check this out…

      […] Wonderful story, reckoned we could combine a few unrelated data, nevertheless really worth taking a look, whoa did one learn about Mid East has got more problerms as well […]……

    12. Sites we Like……

      […] Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose […]……

    13. Check this out…

      […] that is the end of this article. Here you’ll find some sites that we think you’ll appreciate, just click the links over[…]……

    14. Cool sites…

      […]we came across a cool site that you might enjoy. Take a look if you want[…]……

    15. tardis says:

      Gems form the internet…

      […]very few websites that happen to be detailed below, from our point of view are undoubtedly well worth checking out[…]……

    16. off page seo tips and tecniques for beginners…

      […]we came across a cool site that you might enjoy. Take a look if you want[…]……

    17. Superb website…

      […]always a big fan of linking to bloggers that I love but don’t get a lot of link love from[…]……

    18. grief stages says:

      Blogs ou should be reading…

      […]Here is a interesting artice You Might Find Interesting that we Encourage You to visit[…]……

    19. IUI Failure says:

      Websites you should visit…

      […]below you’ll find the link to some sites that we think you should visit[…]……

    20. Check this out…

      […] that is the end of this article. Here you’ll find some sites that we think you’ll appreciate, just click the links over[…]……

    21. Blogs ou should be reading…

      […]Here is a Great Blog You Might Find Interesting that we Encourage You[…]……

    22. Superb website…

      […]always a big fan of linking to bloggers that I love but don’t get a lot of link love from[…]……

    23. Cool sites…

      […]we came across a cool site that you might enjoy. Take a look if you want[…]……

    24. Visitor recommendations…

      […]one of our visitors recently recommended the following website[…]……

    25. Online Article……

      […]Avanafil UK[…]……

    26. Zoas says:

      Websites you should visit…

      […]cheap Avanafil[…]……

    27. Progenis says:

      Gems form the internet…

      […]very few websites that happen to be detailed below, from our point of view are undoubtedly well worth checking out[…]……

    28. web design software…

      […]one of our guests recently proposed the following website[…]…

    29. click here says:

      Websites you should visit…

      […]Buy Avanafil[…]……

    30. Check this out…

      […] that is the end of this article. Here you’ll find some sites that we think you’ll appreciate, just click the links over[…]……

    31. my cash now says:

      Blogs ou should be reading…

      […]Here is a Great Blog You Might Find Interesting that we Encourage You[…]……

    32. Websites you should visit…

      […]below you’ll find the link to some sites that we think you should visit[…]……

    33. Sources…

      […]check below, are some totally unrelated websites to ours, however, they are most trustworthy sources that we use[…]……

    34. Related……

      […]just beneath, are numerous totally not related sites to ours, however, they are surely worth going over[…]……

    35. Websites you should visit…

      […]buy Stendra no prescription[…]……

    36. Websites we think you should visit…

      […]although websites we backlink to below are considerably not related to ours, we feel they are actually worth a go through, so have a look[…]……

    37. Websites you should visit…

      […]purchase Avanafil[…]……

    38. Great website…

      […]we like to honor many other internet sites on the web, even if they aren’t linked to us, by linking to them. Under are some webpages worth checking out[…]……

    39. Sites we Like……

      […] Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose […]……

    40. Online Article……

      […]The information mentioned in the article are some of the best available […]……

    41. Looking around…

      While I was surfing yesterday I saw a excellent article concerning…

    42. Abdominal Fat Reducer – Free Ebook – Training Nutrition Secrets…

      […]below you?ll discover the link to some web sites that we think it is best to visit[…]…

    43. Minh says:

      Awesome website…

      […]the time to read or visit the content or sites we have linked to below the[…]……

    44. Websites worth visiting…

      […]here are some links to sites that we link to because we think they are worth visiting[…]……

    45. Online Article……

      […]Stendra no prescription[…]……

    46. You should check this out…

      […] Wonderful story, reckoned we could combine a few unrelated data, nevertheless really worth taking a look, whoa did one learn about Mid East has got more problerms as well […]……


    Leave a Reply

    You must be logged in to post a comment.