Jacobson Technologies
Home | Experience | Links | Credits | Resources | Tips | Contact | Feedback
Security | Tough Times?
Computers For Kids

Security - Fake Phishing Site - You fell for it!

 

If you ended up on this page then you might have clicked a link that looked like one from your bank (if you get my security newsletter)- or maybe you got here from the fake phishing page.

This page was built to show one example of how easy it is to be fooled by an innocent and valid looking link.

Or, you are here because you want to see how easy it is to get fooled by a link to send an e-mail.

Click here to see the original phishing e-mail (it's OK, this isn't a hoax, it just takes you to an example phishing e-mail)

Here is something similar to what you would probably see in your web browser if you clicked a link in a real phishing e-mail:

 

(FAKE) Bank of Kalamazoo - Secure Customer Login (FAKE)

 

E-Mail Address
Account Number
Password

 

Click for secure login

 

 

If you clicked on one of the e-mail links then your e-mail program probably opened up. You would have seen a prepared e-mail like this pop up. All you have to do is fill in some simple information. It looks just fine. So you send something to your bank right?

To: updates@Bank0fKalamazoo.com
From: John Schmidt (jschmidt@forezthought.com)
Subject: Regarding my account. Reference number: 27bf9d7

E-Mail address: jschmidt@forezthought.com
Account Number:

 

Wrong! You were tricked!

Here you are prompted with a prepared e-mail. All you have to do is enter your account number and then whatever comments you care to send.

Here is the problem:

Where you are actually sending the e-mail is to updates@Bank0fKalamazoo - but the 0 in "0f" is not really an O, it's a 0 (ZERO)!

Here is a picture that I hope will illustrate just how easy it is to mistake number zero from letter O. Click the image for a larger version (it will open in a new window).

Click for large Zero Compare Image

FYI only: [Click here for technical details on how I created these images.] [Click here for the source document (MS Word)].

You would be surprised how easy it is to make one of these fake web sites. There are people doing it all over the globe, and making an awful lot of money stealing money from people just like us!

The moral of the story is to be very careful about what links you click on, where you enter your passwords, and to whom you send information. Your private information should be just that - private. Please be careful out there. The Internet is a great place to play, research, play games, and talk to your friends and family. Let's all be careful and keep it that way!

Go back to the fake phishing page

Go back to Security Home