Re: Phishing++

Actually there are already clients that detect mismatched urls like  
that.  Mailody from KDE, for example.

On 24-Oct-07, at 11:45 PM, <michael.mccormick@wellsfargo.com> wrote:

> When are HTML renderers (esp. email) going to stop making  
> hyperlinks of
> the form <a href=URL1">URL2</a> clickable?  Instead of rendering it  
> as a
> regular browser hot link, clicking on it should trigger a warning
> message if URL1 != URL2.
>
> -----Original Message-----
> From: public-wsc-wg-request@w3.org [mailto:public-wsc-wg- 
> request@w3.org]
> On Behalf Of George Staikos
> Sent: Wednesday, October 24, 2007 11:26 PM
> To: W3 Work Group
> Subject: Phishing++
>
>
>
> I just received this phish today.  I thought it was good enough to
> forward on to remind us of where things are going and what we're  
> trying
> to stop:
>
>
>
> ! Importance: High
> BancorpSouth Inview
>
> IMPORTANT SECURITY NOTICE
>
> All Users - Must Accept New Digital Security Certificate 2007  
> (Security
> ISO 27001 Certification Consulting)
>
> Customers of numerous banks have been victims of ACH and wire transfer
> fraud in recent weeks, resulting in the origination of unauthorized  
> ACH
> entries and wire transfers from customers' computer systems.
>
> BancorpSouth Enhanced Security Authentication We have enhanced the
> BancorpSouth security access to further safeguard access to your  
> account
> information.
>
> IT IS VITALLY IMPORTANT THAT YOU REMEMBER AT ALL TIMES THAT THE  
> SECURITY
> AND INTEGRITY OF YOUR CONFIDENTIAL INFORMATION AND CASH MANAGEMENT
> APPLICATIONS DEPEND UPON YOUR OWN COMPUTER SYSTEM BEING ADEQUATELY
> PROTECTED FROM OUTSIDE THREATS.
>
> BancorpSouth now requires all InView users to enroll in our 2-way
> authentication security system, Passmark.
> You will be able to provide your Passmark information quickly and  
> easily
> using our secure server web form.
> Please understand that without promptly providing your Passmark
> information, your BancorpSouth Corporate Cash Management Online  
> service
> may be discontinued.
>
> To update your Passmark at this time, please visit our secure  
> server web
> form by clicking the hyperlink below:
>
> Login by clicking here: https://www.bxs.com/inview/
>
> 2007 BancorpSouth Corporate Cash Management Online Passmark Services
>
>
>
>
>
> The real URL is: http://www.bxs.inview.session34854.certificate-
> logon2007.serial61623682-0007.dre43.com/login.htm
>
>
> They're getting better!  It's going to be tough to educate users
> around some of these ones.  They're even going directly after some of
> the technologies that are designed to block them.
>
> --
> George Staikos
> KDE Developer				http://www.kde.org/
> Staikos Computing Services Inc.		http://www.staikos.net/
>
>
>
>
>

--
George Staikos
KDE Developer				http://www.kde.org/
Staikos Computing Services Inc.		http://www.staikos.net/

Received on Thursday, 25 October 2007 06:47:56 UTC