Are scammers leaving subtle clues?

Today we saw the following Google AdWords phishing scam in our spam traps:

A legitimate link is displayed in the mail body as http://adwords.google.com/select/Login. However, as with most phishing emails this isn’t the link which is accessed when clicked.

The clue is in the registration information for the web site which is accessed. This site is registered to an address in Shady Lane.

Posted on November 14th, 2008 by Jo, SophosLabs UK
Filed under: Spam

IRS Phishing Scammers
From SecureCode to Verified by Visa
Winds of change
Advice For Auntie
Another Facebook Phish Attempt

About SophosLabs

SophosLabs protects businesses from known and emerging malware - viruses, rootkits and spyware - and other computer threats like phishing, spam and scams. Learn more about the people who write this blog.

RSS feed

SophosLabs blog