Nasty Phishing E-mail

heavensbug

Now I might be a computer consultant but they are a very big area.

I don't look into networking unless I have to as I am more specialised in another area.

Was just hoping that from my experience it could show how easy it is to be phished and the type of info that is out there.

Some of the stuff I have posted may be wrong.

But as I have seen it.

E-mail can be spoofed.
Ip address can be taken from the header or even embedded in an image hosted in your e-mail which can be redirected to a website.
IP Address can give geographic location within 0.5 miles. Most postcodes will cover this.

Is there really a need to keep pointing out 3 words in my OP when all I wanted was a simple piece of advice and to provide help to others to try not be ripped off by these con-artists.

HoofeHearted

heavensbug wrote: »

Depends what site you look at.

Some give you the actual location that the IP is registered to by the company outsourcing the locations.

e.g.

http://www.ip-adress.com/ipaddresstolocation/

This is more for static addresses but some can go deeper dependant on the info they want.

Some can go even deeper than that.

That's what I mean. If I use the link it says I am in Sheffield (ISP=PlusNet). Wrong side of the Pennines I'm afraid!

heavensbug

Now that is interesting as if I do it from my office it actually puts a google pin in my head

Map pops up exactly where I am.

There are hundreds out there. I know that I managed to track it to the exchange I use.

There are other websites out there. Its just frightening how much info can be had on the WWW.

heavensbug

Blacksheep1979 wrote: »

you know this and shoudl be looking at the ip's in the message header (not that this is anywhere near 100% either)....

Well I would have done if I had needed to get that far.

I could tell by the address without even having to check IP as it was

[EMAIL="...@nationwidebuildingsociety-email.com"]...@nationwidebuildingsociety-email.com[/EMAIL]

No need to go any further as I knew this was totally false from experience.

Anything else that I suspect just does not get opened and I go direct to the businesses website.

chris667

Belnahua wrote: »

Not really! As banks already tell you they'd never send you an email with a link asking you to login, and people still click the link. So if they adopted that ploy, the spammers would just adapt their tactics and send plain text emails!

But if they sent plain text emails they couldn't put a link into them!:rolleyes:
You need to write something in HTML if it is to contain a hyperlink. If they all did this and widely advertised it, I think phishing would die out quickly.

Blacksheep1979

heavensbug wrote: »

Now I might be a computer consultant but they are a very big area.

I don't look into networking unless I have to as I am more specialised in another area.

Was just hoping that from my experience it could show how easy it is to be phished and the type of info that is out there.

Some of the stuff I have posted may be wrong.

But as I have seen it.

E-mail can be spoofed.
Ip address can be taken from the header or even embedded in an image hosted in your e-mail which can be redirected to a website.
IP Address can give geographic location within 0.5 miles. Most postcodes will cover this.

Is there really a need to keep pointing out 3 words in my OP when all I wanted was a simple piece of advice and to provide help to others to try not be ripped off by these con-artists.

In which case you should realise this is quite an average phishing email and I'm slightly concerned for you if you were almost caught out by it as there are far better ones out there.

Oh and it was 4 words - and stating that something is your profession generally means that you'll know about other things in that broad scope of work, I'm nothing to do with networking but know at least some of the basics.

heavensbug

I wasn't nearly caught out by it.

I spotted it before I had even looked at it.

It concerned me that my Post Code was in the preview pane. Which is the question that I am asking as until today I was not aware that Geographical location and postcode is available from IP Address.

Something that I have now learnt.

I am a DBA which has very little to do with internet/e-mail. I can set it up and I can use it.

Only reason I said it was my profession was so that people knew I could understand more Jargon than someone who may need it in leyman terms.

Professionally the first thing you should do is gauge at what technical level you need to speak.

Sorry, getting on a bit of a rant and I really should not be as you have all been very helpful.

4 words. Yeah I guess. But is "A" more of a letter or a Word. :rotfl:

chris667

Blacksheep1979 wrote: »

In which case you should realise this is quite an average phishing email and I'm slightly concerned for you if you were almost caught out by it as there are far better ones out there.

Oh and it was 4 words - and stating that something is your profession generally means that you'll know about other things in that broad scope of work, I'm nothing to do with networking but know at least some of the basics.

Actually, I wouldn't agree with that at all. Would you go to a gynecologist if you break your arm?

timbim_2

So much for geo IP lookup, my IP is listed as being in the Yorkshire Dales, and I live on the South Coast.

superscaper

This is exactly why I use unique email addresses. If it had been me I'd have seen straight away which company/database the info originated from.