From: Todd Burroughs (todd@hostopia.com)
Date: Sat Aug 21 2004 - 15:14:23 EDT
I haven't looked for this, but search google for:
"Please configure mysql.info.php" (with quotes).
I've seen this script used on several scammers sites in a modified form.
Not sure if it's the same person/group that I'm seeing or the modified
script forms part of this "kit". Maybe some searches on other strings
in the script will help. The mods basically change the HTML stuff
to look like eBay or whatever site they are using for the scam.
Todd Burroughs
--- The Internet has given us unprecedented opportunity to communicate and share on a global scale without borders; fight to keep it that way. On Fri, 20 Aug 2004, BALDWIN, BILL (SBCSI) wrote: > This may not be the forum, but Sophos is reporting a phishing toolkit that > is available on the internet. My searches have not turned up anything. I > am interested in reviewing this kit to determine how to combat it. > > http://www.sophos.com/spaminfo/articles/diyphishing.html > <http://www.sophos.com/spaminfo/articles/diyphishing.html> > > TIA, > Bill > > > ------------------------------------------------------------------------------ > Ethical Hacking at the InfoSec Institute. All of our class sizes are > guaranteed to be 12 students or less to facilitate one-on-one interaction > with one of our expert instructors. Check out our Advanced Hacking course, > learn to write exploits and attack security infrastructure. Attend a course > taught by an expert instructor with years of in-the-field pen testing > experience in our state of the art hacking lab. Master the skills of an > Ethical Hacker to better assess the security of your organization. > > http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817 > ------------------------------------------------------------------------------- > ------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817 -------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:00 EDT