Here’s a good scam!
Very nicely done, they only messed up in a few places.
Normally when you get a phishing attempt, from “ebay” or whoever, the fastest way to tell is to hover on the URL and see that it really links to “www.scammerhome.net”. This one avoids that, by using a cleverly crafted ebay “About me” page.

You can see it live at:
http://members.ebay.com/ws/eBayISAPI.dll?ViewUserPage&userid=Inssommia&JBR_W0QQitemZ26036QQssPage36QQssPageNameZWDVWQQrdZ1QQcmdViewItem&item=28011654654
DO NOT TYPE YOUR real DETAILS IN! Make something up.
Take a look at the top bar of the browser page, and then do a ‘hard refresh’ (Ctrl-F5 in Firefox) and watch the slightly freaky way the page reloads.

It’s been very neatly done using a set of images and looking at the source, there is no javascript used at all!
The log-in (enter fake details) takes you to an ebay themed page, where they forgot to re-write the URL to ebay – it goes to http://plymouth.rtcubed.net/.download/secure/ which tries to get you to download some file with the name referenced in the email.

If anyone wants to take a look and report back what the payload is, I’d be interested.
(Bonus points for anyone who knows what the Google search you can still see was about!)

Who says burglars don’t pick or bump locks?
Saturday, November 14th, 2009Here’s a report I found online, reporting on a 2-man crimewave using bumpkeys. Lasting over several years, the police had a very good idea who was behind it, and despite traiing them for 2 years theey never got them red-handed. However, when police eventually went to one of their houses, they found it packed with stolen goods! Bumping criminals caught in USA
Closer to home, I went last week to a church who had been targeted. The big old and impressive lock on the vestry door had been opened, and my investigation revealed it was picked with wires. A few hundred pounds in cash was taken. Hardly worth it – robbing a church? If there is a god, and a hell, then those criminals will really regret that choice!
We hope to prevent the need for divine retribution, though. The new security system, carefully designed and chosen to be in keeping with the very old and beautiful wood and stone, should keep anyone unauthorised out for a very long time.
Posted in Cheers & Jeers, Commentary, Crime, Jobs | No Comments »