WHO’S PHISHING TODAY

Every day at KnightsBridge Castle we receive phishing attacks. We monitor them but I thought today I would share with you the Phishing effort of the day. Today’s effort is the common Ebay notice. The wording of the phishing attempt is as follows.

_________________________________

EBAY LOGO

Dear sir,

We recently have determined that different computers have logged onto your eBay account, and multiple password failures were present before the logons. We strongly advice CHANGE YOUR PASSWORD.

If this is not completed by October 24, 2006, we will be forced to suspend your account indefinitely, as it may have been used for fraudulent purposes. Thank you for your cooperation.

CLICK HERE TO CHANGE YOUR PASSWORD

Thank you for your prompt attention to this matter.

We apologize for any inconvenience.

_________________________________

Upon clicking to change your password you are directed to a DNS location, not the URL of EBAY. A trace of the DNS reveals the following location of the phishing effort. EBAY has not moved its security facilities to Uruguay as indicated by the DNS.

OrgName: Latin American and Caribbean IP address Regional Registry

Address:    Potosi 1517

City:       Montevideo

Country:    UY