Password Authentification Spoofs

[the_ninja]

Hi all,

This may be a bit of a strange request, but I need help creating password authentification spoof email, they type you get when someone is trying to steal your eBay or PayPal password.

I have been asked to give a demonstartion to some "internet ignorant" people on what happens if you receive one of these emails and you follow the link to a web page and enter your login details. I am not a programmer by any stretch of the imagination but do have some HTML experience and would like to create a mock login page for something like eBay or MSN that will send the login info to my email so I can show them how easy it is to gain access to their accounts.

Is there anyone who can help me? Plesae understand that I am not trying to steal passwords, it is merely for educational purposes and to hopefully help people identify these hoax emails and protect themselves from them.

[Stephen Philbin]

Don't be suprised (or offended) if nobody helps. It's not the kind of info a responsible developer would consider giving without pretty darn strong assurances (ie. actually being a part of your educational group).

Sorry. I'm sure you understand.

[the_ninja]

Don't be suprised (or offended) if nobody helps. It's not the kind of info a responsible developer would consider giving without pretty darn strong assurances (ie. actually being a part of your educational group).

Sorry. I'm sure you understand.

I do understand, I know it is a bit of a sticky topic. I just thought I might as well ask. :o

[ray326]

You could just grab one of those emails and fix the phishing link to point to your demo. The thrust of your presentation should be first that no legitimate business will ever ask you to do anything like that and second that what looks like a link on a page to one place can actually be a link to any place on the Internet.

[the_ninja]

That is the way that I first intended doing it: altering a spoof mail I had received. Typically though, now that I actually want one of them I can't find one. I used to get them on a daily basis when I used eBay on a regular basis but haven't had one in ages, that's why I thought maybe someone could help me create one. Alternatively, if someone has received one recently that they wouldn't mind parting with they could forward it on to me.

Rest assured, the primary point of my little demo is going to be "Dont believe these emails, just delete them".

[NogDog]

Here's one from my junkmail folder on yahoo - and I don't even have an Ebay account. Note that the link text in the message is not where the link really goes to.

[BlackHawk]

:o