Select Page

Devious.

We start with a link in a post:

Bulletin123123123

The link points to www(dot)logins-myspace-profiles(dot)n3t.nl, which opens an IFrame and loads the following site (www(dot)myspace-profileviews(dot)com/login/).  This is a very realistic phishing site, complete with the same ads served on myspace.   
 
Mspace10912310712312

More at Todd Towles’ site (thanks Todd for sending this to me).

Alex Eckelberry