|
|
| Author |
Message |
| DrDonnyBrago |
This post is not being displayed .
|
DrDonnyBrago
World Chat Champion
Joined: 03 Jan 2010
Karma :  
|
|
| Back to top |
  |
You must be logged in to rate posts |
|
 |
| Louise |
This post is not being displayed .
|
Louise
World Chat Champion
Joined: 22 May 2006
Karma : 
|
|
| Back to top |
 |
You must be logged in to rate posts |
|
|
| mjn51 |
This post is not being displayed .
|
mjn51
Traffic Copper
Joined: 04 Feb 2011
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| CaNsA |
This post is not being displayed .
|
CaNsA
Super Spammer
Joined: 02 Jan 2008
Karma : 
|
 Posted: 14:21 - 16 Mar 2011  Post subject: |
 |
|
they get you if mis-type the webaddress eg. www.natwets.co.uk
ball ache |
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| The Artist |
This post is not being displayed .
|
The Artist
Super Spammer
Joined: 06 Jan 2008
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| panrider_uk |
This post is not being displayed .
|
panrider_uk
World Chat Champion
Joined: 23 Sep 2007
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| supZ |
This post is not being displayed .
|
supZ
World Chat Champion
Joined: 03 Feb 2009
Karma : 
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Nope. |
This post is not being displayed .
|
Nope.
World Chat Champion
Joined: 17 Feb 2011
Karma :
|
Posted: 14:38 - 27 Mar 2011  Post subject: Re: Banking scam - how? |
|
|
| DonnyBrago wrote: | Hi, just went to log in to natwest banking and this screen came up:
Obviously it is a details stealing scam but how did whoever made it get it to come up from the natwest site after entering my customer number?
I entered a load of crap into each box and it went away bringing me to the next 'genuine' Natwest window where it asks for pin and password (didn't enter them by the way). I haven't used this PC for banking before so there is no risk of me giving details away already, do I have something dodgy on my work PC though? Is it likely to be a phishing scam of the Natwest site? |
Bit of a bump, but this is called a 'Man in the middle attack', what somebody does is infiltrate your network and place a fake server on it that redirects certain domains to there website. This fools you into thinking that your on the Banks website when really your not, its a common thing to occur on networks with high usage and not-that-great security.
____________________
Former: Derbi GP1 50, Sachs XTC 125, Suzuki GSXR 400 GK73A, Kawasaki ZX7R, Suzuki DR250, Yamaha RD350
Current: 2011 Yamaha XT660Z Ténéré, 2003 Yamaha YZR-R1 5PW (In Build), 2009 Kawasaki ZZR1400 |
|
| Back to top |
 |
You must be logged in to rate posts |
|
|
| multijoy |
This post is not being displayed .
|
multijoy
World Chat Champion
Joined: 03 Oct 2008
Karma : 
|
| Posted: 20:31 - 27 Mar 2011 Post subject: Re: Banking scam - how? |
|
|
| computid wrote: |
Bit of a bump, but this is called a 'Man in the middle attack', what somebody does is infiltrate your network and place a fake server on it that redirects certain domains to there website. This fools you into thinking that your on the Banks website when really your not, its a common thing to occur on networks with high usage and not-that-great security. |
Strictly speaking, a MITM attack would sit between the bank and the user and would pass data to-and-from the two sites, but changing what was returned on the fly (so, for example, you'd see the correct balance instead of the balance minus the amount you've just been ripped off by).
This is technically difficult because you're trying to fool both the user and the banking service and of limited use- for example, in order to get money out (assuming something like pinsentry is in use), you need to persuade the user to enter the authentication details for your particular transfer.
What this is is a simple redirection; a piece of malware is redirecting requests for a bank to it's own site, recording the details and then sending the user back on their merry way. I would imagine the aim of the game is to gather enough information to encode some cards, set up some direct debits and the like, rather than OMG MASSIVE HAX.
____________________
'11 CBF1000A, '99 C90, '98 CB500
silky666: He rode amazingly well considering his bike is the weight of a small van and had slicks on. |
|
| Back to top |
| |
You must be logged in to rate posts |
|
 |
Old Thread Alert!
The last post was made 15 years, 171 days ago. Instead of replying here, would creating a new thread be more useful? |
 |
|
|
Help & FAQs
Search BCF
Members
Groups
Events Calendar
rating
rating