View Single Post
Old 11-01-2007, 12:47 AM   #15
Sagerian
Newly Abandoned
 
Sagerian's Avatar
 
 
Join Date: Oct 2007
Location: Sydney, Australia
Posts: 22
Default

I've seen some pretty clever ebay and paypal ones. Well worded and all that, the only giveaway is the link, it's usually a subdomain like ebay.blahblah.com

So I clicked the link and it goes to what looks exactly like an ebay or paypal logon screen. I typed a fake username and password in and here's the genius part, it spits out an "incorrect password" message and then redirects you to the correct logon page. So the user types in their details again, gets in and just assumes they mis-typed the first time, meanwhile your details have already been sent off.

Some of them are tricky, but as Cassini90125 said, no one needs to know or confirm or require you to change your details but you.
Sagerian is offline   Reply With Quote