[EPIC] New scam: phish from the OFFICIAL WoW site

[Poglia]

(edited) ...

[Forgiving]

Not much to it. If you explained how to make the youtube video or Create a program and what you suggest for the program to be it would come out as al ot better of a thread. also, you should edit it a bit. some stuff just doesnt seem right.

[omg_lol]

is phishing illegal?

nvm found my awnser on google

[idontknow951]

THE SCAM

First of all, this is NOT a repost and I have NEVER seen anything like this. The ideator of this scam is me. But let's explain it...

If you type yourself "www.worldofwarcraft.com" or "www.wow-europe.com" on your browser to access the WoW account management, will you ever suspect that your datas are being phished by a scammer? I think no. But this is possible and with no keyloggers involved: I will explain here how.

REQUIREMENTS:

- Good programming skills
- A phishing site
- A YouTube account

HOW IT WORKS

You need to create a program yourself for this scam. It can be a fake gamecard generator, a fake WoW hack or anything. You will advertise the program on YouTube or where you want so people will download and use it. You also need a WoW phishing site to collect datas. The program you create will open this file:

C:\WINDOWS\system32\drivers\etc\hosts

And adds these lines:

XXX worldofwarcraft.com
XXX wow-europe.com

Where XXX is the IP address of your phishing site.

When the victim goes to the official WoW site, he will be redirected to YOUR phising site.

I hope you realize that editing YOUR host files won't edit EVERYONE ELSE'S host files as well, right? /fail.

[supremeoverlord]

I hope you realize that editing YOUR host files won't edit EVERYONE ELSE'S host files as well, right? /fail.

His idea is: When they download and run said hacking program, it'll edit their host file to add their phishing website with the title of the official wow site.
Op's just submitting a good theory of a scam, it'd be hard to pull off - as it'd more than likely trigger alarms with anti-viruses, and many users dont go to the main website, but only for patches, or to renew their account or something. So it may take months for the person to fall for it.
Good idea none the less op.

[Trauts]

Good original idea, although it would be pretty hard to implement. If you went to that much trouble, it would be easier to trojan/ keylog them, and probably quicker too.

[Y R U A NUB ?]

****kk.... you had exactly the idea I had, more than I'd improve it and make it more detailed. Oh well..

[Y R U A NUB ?]

I hope you realize that editing YOUR host files won't edit EVERYONE ELSE'S host files as well, right? /fail.

You fail at being smart? What you want to do is make your victim use the program that edits the host file. /fail.

[supremeoverlord]

Im -pretty- sure that this would get stopped by any anti-virus.
Think about it -> a program is editing an important windows file? somethingsnotright! > the antivirus thinks lol.

[typedef]

Dont worry guys working on a program right now!

[blubb12345]

i cant find a way to get an free ip address for my phishing site

[typedef]

Check my Other topic it describes how do to this!

[Poglia]

Im -pretty- sure that this would get stopped by any anti-virus.
Think about it -> a program is editing an important windows file? somethingsnotright! > the antivirus thinks lol.

Nope. Spybot - Search & Destroy do it when you immunize and it's not detected nor stopped.

[Strichnine]

this is actually REALLY good, try to work on this m8, it would be a flawless scam indeed... geez! the phising site could just be a total replica of the wow site so they wont notice anything! fantastic!

[Poglia]

this is actually REALLY good, try to work on this m8, it would be a flawless scam indeed... geez! the phising site could just be a total replica of the wow site so they wont notice anything! fantastic!

Thanks.

Quite strange that there are only a few replies, this method is new and possibilities are endless...