The Phish Hook

John D. Porter     2007.01.21

The Original Phishing Email.

Here is a copy of the original "phishing"email I received:
[link to phishing email]

Nothing too unusual about it.  The email pretends to be a message from Bank of America.  There are a few minor English grammatical errors.  The recipient is asked to "verify" account information by following an embedded link to a web page.

In the body of the message there is a spoofed hyper-link.  The link appears to point to a Bank of America web site, but it actually points to another, fraudulent web site.  You can see the spoofing if you look in the html source code, appended to the bottom of the email text.  Here is the relevant piece of code:

<a href="http://www.ccsoy.com/.bunadimieata/" target="_blank">http://www.bankofamerica.com/state.cgi?section=signin&amp;update</a>

A good email program will inform and warn a user of spoofed hyper-links in the body of an email.  Mine did.