Infinity-Infinity

How to Run a Phishing Scam

Many people have the idea that phishing scams are complex, and are operated by organised criminals. In fact, they are not that hard to create at all. I could create one, and I could scam people for money. So that’s what I am going to do.* In this article, I will show you how easy it is to create your very own phishing scam set-up. I will deal with the ‘technical side’ — the website and e-mail — but not with harvesting and sending e-mails, not getting caught, etc. READ MORE

Sniffing Browser History with CSS

Have a look at this page: http://making-the-web.com/misc/sites-you-visit/nojs/. It will fairly quickly and effectively generate a list of sites that you have visited.

This proof of concept demonstrates how basic logic in CSS (Cascading Style Sheets) can be used to query a browser to whether a visitor has visited another web page. More generally, it shows that even simple logic in technology has the possibility of being exploited. Although the data used in this example seems rather unimportant, when used to profile a user’s likes and dislikes, for example, it quickly turns from “data” to personal information. READ MORE