MoMusings

Random ramblings and musings about all things malware and related net-nasties...

Friday, 20 July 2007

Surf or Turf? The Verdicts Are In!

Here's a follow-up to my 'Surf or Turf' posting which challenged you to work out whether ten screen shots of e-mails I had received were from who they claim to be from [Turf - The Real Beef] or from imposters [Surf - A Phoul Phish]?

So, to recap and to give any of you out there one final chance to take the challenge, here they are again:

Mug shot 1: Surf or Turf?



Mug shot 2: Surf or Turf?



Mug shot 3: Surf or Turf?



Mug shot 4: Surf or Turf?



Mug shot 5: Surf or Turf?



Mug shot 6: Surf or Turf?



Mug shot 7: Surf or Turf?



Mug shot 8: Surf or Turf?



Mug shot 9: Surf or Turf?



And last but not least....

Mug shot 10: Surf or Turf?



Your answers should be in the following format:

Mug Shot x [1-10] is [Surf|Turf]



SPOILER WARNING - DO NOT PROCEED BELOW THIS LINE - UNLESS YOU WANT TO KNOW THE ANSWERS

YOU HAVE BEEN WARNED!






For those of you that sent me your detective work or were brave enough to leave your findings/guesses as comments instead, I'd like to say thank you for joining in.

For those that took part, and those of you who didn't [shame on you! ;-)] here are the answers, and the pointers to show why it is Surf or Turf.:

  • Mug shot 1:.: The Verdict :. 'Surf' - Did you notice the spelling mistakes and grammatical errors?

  • Mug shot 2:.: The Verdict :. 'Surf' - Did you notice the spelling mistakes, grammatical errors and unusual choice of font?

  • Mug shot 3:.: The Verdict :. 'Surf' - Threats and tight deadlines, dated 1987 and from 'Lana Staton'.

  • Mug shot 4:.: The Verdict :. 'Surf' - Did you notice the grammatical errors and the technical update?

  • Mug shot 5:.: The Verdict :. 'Surf' - Did you notice the grammatical errors and the technical update?

  • Mug shot 6:.: The Verdict :. 'Surf' - Did you notice the odd phrasing and grammatical errors?

  • Mug shot 7:.: The Verdict :. 'Surf' - Did you notice the odd phrasing and grammatical errors?

  • Mug shot 8:.: The Verdict :. 'Surf' - Did you notice the grammatical errors and the technical update?

  • Mug shot 9:.: The Verdict :. 'Surf' - Threats and tight deadlines, validation required once a month.

  • Mug shot 10:.: The Verdict :. 'Surf' - Threats and tight deadlines.


So, yes they were all 'Surf' after all, well done to those of you that correctly worked it out.

As some of you mentioned the URLs shown in the screenshots of the e-mails usually did not go to the same place they say they would. Of all of the ones I used for this challenge, number 6 was the most convincing and number 3 would have probably fooled some of you until the threat at the end and the date error.

Are you up for another challenge some time?

BTW, did any of you check out the 'McAfee SiteAdvisor Phishing Challenge'. If you did and scored 8 or more then consider yourself a 'Phishing' sleuth.

Labels: , ,

Digg! Slashdot Slashdot It! Save This Page

0 Comments:

Post a Comment

<< Home