CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

In Praise of Phish Fighters: CastleCops/Washington Post
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> Happy Events [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Wed Jan 31, 2007 11:42 pm    Post subject: In Praise of Phish Fighters: CastleCops/Washington Post
Reply with quote

Thanks Brian for a wonderful piece:

http://blog.washingtonpost.com/securityfix/2007/01/in_praise_of_the_phish_fighter.html


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Save_the_Gnome

Captain
Captain
Premium Member

Joined: Dec 17, 2006
Posts: 435

Premium

PostPosted: Sun Feb 11, 2007 8:13 pm    Post subject: Re: In Praise of Phish Fighters: CastleCops/Washington Post
Reply with quote

Paul wrote:
Thanks Brian for a wonderful piece:

http://blog.washingtonpost.com/securityfix/2007/01/in_praise_of_the_phish_fighter.html


Paul, that was a very flattering article. I also read through your PowerPoint presentation.

Quick question: You want us to forward you our phishing e-mail? Like the never-ending FifthThird Bank one? I am one who just deletes the bloody things.


_________________
Limitations live only in our minds.

But if we use our imaginations,

Our possibilities become limitless.

- Jamie Paolinetti
Back to top
View users profile Send private message Visit posters website Yahoo Messenger
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16536

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Sun Feb 11, 2007 8:27 pm    Post subject:
Reply with quote

Reporting_phishing_scams

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Sun Feb 11, 2007 9:13 pm    Post subject:
Reply with quote

Yes send us your phish. That is the first bit of evidence that you have in your possession, and if you delete it, you discard that evidence.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Save_the_Gnome

Captain
Captain
Premium Member

Joined: Dec 17, 2006
Posts: 435

Premium

PostPosted: Sun Feb 11, 2007 9:36 pm    Post subject:
Reply with quote

Ikeb wrote:
Reporting_phishing_scams


Okay, I read through all the links. You forgot one. Incredimail which I believe is just a skin for my Outlook 2003.

Does this include mail such as the one from Red's Kizzy needing help?


_________________
Limitations live only in our minds.

But if we use our imaginations,

Our possibilities become limitless.

- Jamie Paolinetti
Back to top
View users profile Send private message Visit posters website Yahoo Messenger
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16536

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Sun Feb 11, 2007 11:21 pm    Post subject:
Reply with quote

Save_the_Gnome wrote:
Ikeb wrote:
Reporting_phishing_scams


Okay, I read through all the links. You forgot one. Incredimail which I believe is just a skin for my Outlook 2003.

I am not familiar with that one. Feel free to add it to the wiki yourself though. Wink

Save_the_Gnome wrote:
Does this include mail such as the one from Red's Kizzy needing help?

"Red" being ol' baldy you mean? Wink Do tell us more about his "Kizzy". Smile

Back to top
View users profile Send private message
Tim_aka_Red_Barren
Currently banned

Premium Member


Joined: Aug 28, 2005
Posts: 1046

Blue Security Premium

PostPosted: Mon Feb 12, 2007 1:07 am    Post subject:
Reply with quote

Ikeb wrote:
"Red" being ol' baldy you mean? Wink Do tell us more about his "Kizzy". Smile


Kizzi is in Tanzania at the moment, teaching children how to live, since three children in Africa die every minute. And while she is only 18, if you spell her name with a "y", she grabs hold of your bullocks and twists until you learn to spell right.

What else do you want to know about her? Wink

I would beat you on the head until you donate to her cause, but that's off-topic. Wink

Back to top
View users profile Send private message
Save_the_Gnome

Captain
Captain
Premium Member

Joined: Dec 17, 2006
Posts: 435

Premium

PostPosted: Mon Feb 12, 2007 3:26 am    Post subject:
Reply with quote

Tim_aka_Red_Barren wrote:


I would beat you on the head until you donate to her cause, but that's off-topic. Wink


Hey, Ikeb! I think that is what is referred to in crisis intervention circles as a cry for help. blowtorch


_________________
Limitations live only in our minds.

But if we use our imaginations,

Our possibilities become limitless.

- Jamie Paolinetti
Back to top
View users profile Send private message Visit posters website Yahoo Messenger
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16536

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Mon Feb 12, 2007 4:00 am    Post subject:
Reply with quote

Maybe it is phish. Does a threat of physical force fall under the definition? Confused

Back to top
View users profile Send private message
Tim_aka_Red_Barren
Currently banned

Premium Member


Joined: Aug 28, 2005
Posts: 1046

Blue Security Premium

PostPosted: Mon Feb 12, 2007 5:19 pm    Post subject:
Reply with quote

Ikeb wrote:
Maybe it is phish. Does a threat of physical force fall under the definition? Confused


Well, beating you on the head is more for the "ol' baldy" crack than an attempt at extortion, so no, that doesn't count. Wink weee







(seriously, I don't mind you calling me that. It's better than what a lot of other people call me. Wink)

Back to top
View users profile Send private message
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16536

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Mon Feb 12, 2007 6:33 pm    Post subject:
Reply with quote

Tim_aka_Red_Barren wrote:
(seriously, I don't mind you calling me that. It's better than what a lot of other people call me. Wink)

Shocked ooh .... pray tell, what would that be? Curious minds need to know. Wink

Back to top
View users profile Send private message
Save_the_Gnome

Captain
Captain
Premium Member

Joined: Dec 17, 2006
Posts: 435

Premium

PostPosted: Mon Feb 12, 2007 11:42 pm    Post subject:
Reply with quote

Hey, Ikeb & Paul! (I doubt that Red is constructively involved here.)

I had set that FifthThird Bank phishing on my block/bounce/delete actions. One problem is that they come everyday; do you want me to report each one?

Another problem is that I can't copy the text.

I did use Frontpage, and came up with a totally different message:

<html>

<head>
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>New Page 1</title>
</head>

<body>

<p>
<a title="http://www.53.com.bankingportal.id43613720638.ezbsite.info/conf" href="http://www.53.com.bankingportal.id43613720638.ezbsite.info/conf">
<img title="http://www.53.com.bankingportal.id43613720638.ezbsite.info/conf" src="file:///C:/Documents%20and%20Settings/Ann/Local%20Settings/Application%20Data/IM/Runtime/Message/{921466CA-A25B-416A-85A6-F6890EE069D4}/Show/bauxite1.gif" border="0" width="608" height="386"></a>
</p>
<p>&nbsp;</p>
<p><font color="#fffff2">He examined it and was not much surprised to find it
was envy. conservation corruption Morphose and Morphose Complex.</font></p>
<p><font color="#fffff4">Two more of those on top of the ones you took half an
hour ago may drop you into a coma and then kill you, he thought, and a second
voice answered at once: Fine with me. He had never realized how many n's there
were in an average line of type. &quot;YOU CAN'T BURN MISERY, YOU COCKADOODIE BRAT,
YOU CAN'T BURN MISERY! &quot;Now Paul,;she said, in the prim voice he knew so well.
&quot;&quot;What was it about? Writing may be masturbatory, but God forbid it should be an
act off autocannibalism. I doan know if it be true, but the Bourkas, dey say
even when you get behin;her, the goddess, she seem to be lookin;at you.
bookplate</font></p>
<p><br>
<br>

What should I do?


_________________
Limitations live only in our minds.

But if we use our imaginations,

Our possibilities become limitless.

- Jamie Paolinetti
Back to top
View users profile Send private message Visit posters website Yahoo Messenger
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Tue Feb 13, 2007 12:24 am    Post subject:
Reply with quote

Yes report each to pirt.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Save_the_Gnome

Captain
Captain
Premium Member

Joined: Dec 17, 2006
Posts: 435

Premium

PostPosted: Tue Feb 13, 2007 12:58 am    Post subject:
Reply with quote

Paul wrote:
Yes report each to pirt.


Paul, that was one of my questions. Here is the biggie: The e-mail is a photo that I can not copy. I can only view it, and the html code when I use FrontPage. I have no idea of how to report it.

Can I just forward it to someone?


_________________
Limitations live only in our minds.

But if we use our imaginations,

Our possibilities become limitless.

- Jamie Paolinetti
Back to top
View users profile Send private message Visit posters website Yahoo Messenger
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Tue Feb 13, 2007 1:09 am    Post subject:
Reply with quote

Sure, ping me at paul at our domain here.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Happy Events All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer