Phishing Attempt on Traderji - Pls read

DWeeP · #1 14th March 2008, 07:43 PM

I got a PM from saurabh_forever like this:

plz help me out
http://www.traderji.com/investors-gr...t-consent.html

but the url was actually http://traderji.freeweb7.com/investo...t-consent.html

Which asked for id/pass when opened.

Pls do not provide ur user id / pass there.
I have also sent this to admin via 'contact us' link.

Such members should be banned and ip put in blacklist. Silly Phishers.

This PM was also sent to Recipients: abhishekdeshpande, cadipakarora, dilip2k, DWeeP, ford7k, pmotewar, rakamaka, skulk, swagat86
and probably others too. so these people change id/pass immediately.

For those who are new to word phishing: http://en.wikipedia.org/wiki/Phishing

Quote:

Phishing is an attempt to criminally and fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. eBay, PayPal and online banks are common targets. Phishing is typically carried out by email or instant messaging, and often directs users to enter details at a website, although phone contact has also been used. Phishing is an example of social engineering techniques used to fool users. Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical measures.

Thanks.
-Dweep

beginner_av · #2 14th March 2008, 07:57 PM

Phishing traderji? I can understand a bank! or a sexkey id like thing!

hari09omkar · #3 14th March 2008, 08:05 PM

I got the PM too.Saw the web address and didn't enter userid and password.

oxusmorouz · #4 14th March 2008, 08:08 PM

Quote:

Originally Posted by beginner_av

Phishing traderji? I can understand a bank! or a sexkey id like thing!

I wondered about the motive too but I must say, from the looks of it, its ingeniously planned. Its not quite uncommon for people to have the same ID and password for their email (even the official email for some people at times is in yah00 or goog mail PoP3, meaning the mail is not usually downloaded in outlook or eudora). If you click on user CP ---> change user name and password, you get the person's email account. Assuming in 1 out of 10 cases, the official email ID is the same and passwords match, that would give the phisher access to any information stored.
Of course, the entire thing can be a prank played by an utter newbie to test out his new toy but who knows?

So if somebody unknowingly entered the information asked, and if the official email is the same as given in traderji, I'd recommend them to change user name and password for the email id rather than the traderji ID (which is pretty much of no use, except for learning purposes to a student of hacking)

ratan jain · #5 14th March 2008, 09:45 PM

I got the PM too

And I thought only I was the official hacker on this forum

Hey Saint, Oxy, Ashish what say?

Whoosh!!!!!!!!!! Just visited the site........... Traderji should take legal action!!!!!!!!!!!!

Frankly speaking, had I not read this post I would have happily punched in my id and password

Its an exact copy, including the ads!
Its an attempt to get Banking passwords for sure, because most traders have online banking access, with most having third party transfer activated.

I request traderji to take legal action, and request traderji to make this thread sticky for a few days.

ratan jain · #6 14th March 2008, 09:58 PM

Oxy.....................

And what if I just opened the page, and not entered the info......

He still has info about me, Like we tried in chat room 2 days back...

Any thing else he can do with just ips?

moneygrow · #7 14th March 2008, 10:16 PM

hi
iam very new to this share trading and even i dont know the basics of this bussiness so irequest you advise me that in which sector i want to invest & iwant to know what is about smallcap ,midcap

chintan786 · #8 14th March 2008, 11:02 PM

oh god.... i get the message too and given the details now wht to do?

chintan

darsh_goswami · #9 14th March 2008, 11:24 PM

Quote:

Originally Posted by ratan jain

Oxy.....................

And what if I just opened the page, and not entered the info......

He still has info about me, Like we tried in chat room 2 days back...

Any thing else he can do with just ips?

I'm not sure if he can have other information other then ur ip and that too temp one.

An ip can be hacked ( if its hackable enough ) .

I'm glad i didnt get such msg yet. then too i think i will have a look soon from any public comp.
lol...

And ya Ratan .. you are not the only hacker over here. There are many who knows who is the hacker.LOL.... may be i also could be the one.

Regards,..
Darsh.

darsh_goswami · #10 14th March 2008, 11:26 PM

Quote:

Originally Posted by chintan786

oh god.... i get the message too and given the details now wht to do?

chintan

Dear chintan...

U just need to do a simple thing . Change all your passes as soon as possible. and make turn on ur firewall. Thats it.

REgards,..
Darsh