Password phishing 2/2 (made by Tehdead)

Credits go out to http://infinityexists.com
For more information go to: http://infinityexists.com/2008/08/12/underground-password-phishing/

Clip 2/2

August 12th, 2008 by Patchy
Phishing is a method of obtaining sensitive information such as usernames and passwords by pretending to be a trusted website. Tehdead shows us a variety of password phishing techniques that enable an attacker to trick a user into giving up their login information. The first step is to create a fake login identical to the login on the trusted website. In order to not raise suspicion, Tehdead explains two methods to capture the victims password and then transfer them to the real website. One method is to sumbit the information to a php page that is disguised as a pop-up advertisment, and the other is to send the username and password to a simular php page that is contained in an iframe. Lastly, Tehdead describes how to use link manipulation with BBcode to social engineer a victim into going to the fraudulent website. t

Category:

Science & Technology

Tags:

• password
• phishing
• techniques
• infinityexists
• create
• fake
• login