Skip to main content

USAA Phish

MIJN Security Partner.
Placotiweg 2K
4131 NL Vianen (Netherlands)

You are the proud hoster of alpacasvomhahnerfeld.de, which resolves to 185.41.127.3. This domain is the landing domain for a phishing email targeting USAA members.

 "Dear Customer,

Your account has been locked due to an update in our security features, we were unable to update your account. For your protection, online access to your account will remain locked until we properly verify your identity.

To re-instate your access, view your account below to start the update process."

Good try. You even go as far as embedding USAA content (usaa.com) into the email. There is even a twitter.com link, of all things. Very good try.

 Farther down in the email you try to distance yourself from pretending to be the USAA:

"USAA means United Services Automobile Association and its insurance, banking, investment and other companies . Banks Member FDIC."

The email "from" is "foi at gkclasses.com" which is entirely irrelevant.Except that the email originated out of 104.239.173.146, which is a Rackspace IP (hoster of gkclasses.com).

This was the weakest phish I've seen in a long time. If this was you, Bearded Michiganite and neighbor of the beast, then I am disappointed. That AMEX phish you did was a Rembrandt compared to this rubbish.

Received: from [104.239.173.146] ([127.0.0.1]) by gkclasses.com with Microsoft SMTPSVC(7.5.7601.17514);
Wed, 1 Mar 2017 14:03:18 +0000
boundary="===============1676980232=="

There was even a facebook link: USAA?EID=3D87909-0411_body haha. 

What does Status=CONNECT mean at ICANN though? That's pretty clever. 

Popular posts from this blog

The Spinning Brain

Intuition is a phenomenon of the biological brain that doesn't have any physical explanation. Many people experience intuition with varying degrees of success. There are a variety of theories regarding intuition [1] and some people regard intuition with much caution [2] . Yet, I am happily in the camp that has learned to respect my intuition as it has proven time and time again to be correct. Recently, though, I'd been thinking about intuition and soothsaying . There are many cases of people who claim to see the future, whatever that might be. Maybe there is something to be said about this mystical phenomenon. Maybe there is a real physical process at work that we just haven't thought of yet. To this end, I am proposing a theory about human intuition. This theory, though requires some background in quantum mechanics . Specifically, quantum entanglement . I'm not the only person who has theorized about quantum entanglement and its role in biological congnition and th...

AI or AI, Which Is It?

Artificial Intelligence, a noun that has become a household term. Most refer to it as AI, which is less of a mouthful. Where and when did this term become real? [1] Apparently John McCarthy coined this phrase in 1956 at a conference.  Vannevar Bush and Alan Turing both mused about computers being intelligence and being able to enhance human intelligence or even simulate human-like thinking. Is this thinking really "artificial" though? To suggest it being artificial would imply that there is a non-artificial type of intelligence. Otherwise, there is just intelligence, or thinking, or cognition.  The famous Turing Test may be the source of this "artificial" notion. If there is an intelligent series of responses to a human interaction, and those responses are created using a computer program, then that is considered artificial.  On a philosophical note, though, the programs are written by humans. Those programs, using rules given by humans, are creating responses that ...

HP Web Site Failure

The HP site for buying stuff on their Labor Day Sale is broken. I tried it on other computers and each had the same result. Not sure if HP was able to sell anything on their big sale weekend, but I couldn't buy anything. Funny part was the feedback widget that didn't work. Not only could I not buy anything from HP but I couldn't report the problem I was having. Maybe someone at HP could run this through QA again.