Phishing in Yahoo! Geocities?

Van Cutter Romney asks: "I've received a lot of phishing IMs on my Yahoo! Messenger from contacts whose accounts I guess have been hacked into. All the phishing messages lead to Geocities websites like this where the user is displayed a Yahoo! login page. For most people, the page looks legitimate and they enter their Yahoo! username and password (I was nearly fooled once). Since both the website (Geocities) and the messenger belong to Yahoo!, I'd like to know if they are doing to anything to counter these attacks."

Comments

Try Right Clicking the Screen

[Anonymous Coward]

I found it obvious when I right clicked the page and it said Content (C) Flickr...I mean, the site says we are owned by Yahoo! then they claim Flickr owns the content.

Also consider the SSL link seems to not be phished. I tried dummy data in both login forms and it said "Page Not Found" for the phished page that was not secured, while it said "ID not found" when I entered the information on SSL site. Someone should report the site http://www2.fiberbit.net/ to the domain registrar since the form submission is done through a page on that server. I'm quite surprised the person didn't try to mask the email address, obviously that form is used on quite a number of sites since the email address is clearly specified in the page content -- this person deserves to be caught. I just hope no one bought into the scam....

Ummm

[Otter]

Since both the website (Geocities) and the messenger belong to Yahoo!, I'd like to know if they are doing to anything to counter these attacks.

Maybe I'm missing something, but why the hell are you asking us?