ALERT: AOL SCAM, PASSWORD STEALING SCHEME!!

[DaRushin]

Below is a copy of the e-mail that you will recieve. If you click the link it takes you to a geocities page asking for username and password for confirmation.
Here is the E-mail
Subj: Claim your prize !
Date: Sat, 8 Dec 2001 3:55:22 PM Eastern Standard Time
From: Flynn295
BCC: Helen ca

AOL Prize Winner #456464865

You are a lucky winner of an AOL Rewards Prize.

To see what you have won and claim the prize

Click - Here now ,


Here is the link you goto:

http://www.geocities.com/aolrewards2001/

Do not give it your username as it is just a e-mail server side script that collects your password and username.

Ben

 

[John]

You mean that really isn't an authentic AOL site? I really want to win something!!!!

 

[m1ke101]

no offense, but how stupid do you have to be to actually click a link like that? its not like these links are anything new to aol. AOL specifically tells you to NEVER give out your password, even to AOL.

 

[Smbu]

What's going on? I'm sorry I just clicked on the link and I didn't read your entire message. I entered my username and password to see what prize I had won and it just took me to the Main AOL website. Is that supposed to happen? What prize do I get?

 

[BigFatCow]

i got IMed a couple of days ago from aimconsultant88 i think that was his nick. i saved the conversation for later..

aimconsultant88: Hello I am your AOL AIM consultant ThEcOWWaTchEr. I can help you with any questions you have about AOL AIM. Do you have any?
ThEcOwWaTchEr: yes
aimconsultant88: Go on please.
ThEcOwWaTchEr: how much $ does aol get for each click of the banners on AIM?
aimconsultant88: AOL recieves ten cents per click on a banner. Any other questions?
ThEcOwWaTchEr: yes
ThEcOwWaTchEr: how much $ do you make?
aimconsultant88: I make 12 dollars per hour.
ThEcOwWaTchEr: o really
aimconsultant88: Any nore questions?
ThEcOwWaTchEr: yes
ThEcOwWaTchEr: how can i get a job with AOL?
aimconsultant88: Are you eighteen years of age?
ThEcOwWaTchEr: umm when i turn 18 how can i get a jon with AOL
aimconsultant88: You may apply through a letter sent to random houses on a rotation of recievers based stricktly on location. In other words, we come to you.
ThEcOwWaTchEr: o really
aimconsultant88: Any more questions?
ThEcOwWaTchEr: yes
ThEcOwWaTchEr: can i warn you even though you work for
ThEcOwWaTchEr: AOL?
ThEcOwWaTchEr: i mean is it possible
aimconsultant88: You may but I have unlimited screen names and I am only hear to help.
ThEcOwWaTchEr: not will i do it
ThEcOwWaTchEr: ok
ThEcOwWaTchEr: do you get kicked off when you get warned to 100%?
aimconsultant88: No messeage reception becomes more diffuicult
ThEcOwWaTchEr: how?
ThEcOwWaTchEr: is it more dificult?
aimconsultant88: Message reception time is increased by fifteen seconds. When some one types a message, it will take 15 seconds longer to recieve.
ThEcOwWaTchEr: o
aimconsultant88: Will you please take a survey?
ThEcOwWaTchEr: ok
ThEcOwWaTchEr: for what?
aimconsultant88: What is your first name?
ThEcOwWaTchEr: Brian
ThEcOwWaTchEr: u?
aimconsultant88: Thank you, and your screen name?
aimconsultant88: Robert
ThEcOwWaTchEr: thats a dumb question
ThEcOwWaTchEr: you can see my SN
aimconsultant88: Ok may i verify your password (optional)
ThEcOwWaTchEr: you mean tell me what you think it is?
ThEcOwWaTchEr: i dont know if i even remember it
aimconsultant88: No, please type your password so that i know it is yours and you are the owner of this screen name.
ThEcOwWaTchEr: i own it
ThEcOwWaTchEr: theres people on that can tell you i own it
aimconsultant88: This is optional but I am not allowed to believe you unless you verify it
ThEcOwWaTchEr: so do you know what it is?
aimconsultant88: Yes
ThEcOwWaTchEr: what is it
aimconsultant88: I can not tell you because this may not be the owner of the screen name I am speaking to.
ThEcOwWaTchEr: o
aimconsultant88: Do you wish to verify? Yes or No?
ThEcOwWaTchEr: is that why you messaged me, because you dont think i own the SN?
aimconsultant88: No, to ask you if you had any questions and for you to take the survey.
ThEcOwWaTchEr: o
ThEcOwWaTchEr: no
ThEcOwWaTchEr: next question?
aimconsultant88: The survey has ended. (It can not continue without password.) Thankyou
ThEcOwWaTchEr: o
aimconsultant88: The next questions are personal therefore require password
ThEcOwWaTchEr: how many questions are there if i tell you my password?
aimconsultant88: There are six more questions.
aimconsultant88: If you do not wish to complete the survey, I must leave, do you wish to complete the survey?
ThEcOwWaTchEr: not if i have to give you my password?
ThEcOwWaTchEr: bye


the guy IMed me a couple more times a few days later so i blocked him.

 

[John]

ROFL

 

[LukFilm]

Oh no! He got my username and password!!! :|
Goddammit, might as well give it out to everyone now. I have two usernames and passwords:
1) yousuck:myballs
2) youare:fvckingmoron

 

[DaRushin]

I dont even use AOL, My GFU got that e-mail and I seen it. However there a lot of AOL users out there, and even if .1% respond that would be approx 21,000 accounts. That is why I posted it. Rather than being destructive, perhaps you should be a little more helpful. Of course the time you fall victim to a good scam I guess I could be a prick and laugh at you.


Ben

 

[BlakkIce]

lol oh Jesus looooooolll rofl

 

[gopunk]

well in a way, we're doing a good thing by flooding them with bogus ones like the one i just did,

sn: yourmom
pw: isawhore

i encourage you to be creative and come up with your own unique combination!

 

[MajesticMoose]

<< how stupid do you have to be to actually click a link like that? >>



How stupid do you have to be to use AOL? Sorry, but someone had to say it.

m00se

 

[Infos]

Da&* You LukFilm

Now I have to change my passwords

 

[NetworkDad]

I believe this is the email address that the form submits to:

contest_winning_november@pub16.bravenet.com

 

[gopunk]

you sure that's an email address? looks more like a site (from the code) to me...

 

[AdamDuritz99]

crap, i already gave them my username youare and my password adumb@ss. Crap!

peace
sean

 

[NetworkDad]

<< you sure that's an email address? looks more like a site (from the code) to me. >>



It looks like it - When you click on submit, it's what shows up at the bottom of the IE screen. Also, looking at the source html code, that's what it appears to be. I could be wrong though, it's been a while since i wrote a form submission in html.

 

[Justin218]

hah, you know AOL IPs are blocked from AT, right? or has that changed?

 

[Ameesh]

woah, who would have thought

 

[gopunk]

http://monitors.aol.com:contest_winning_november@pub16.bravenet.com/emailfwd/senddata.php

well it's clearly a php script, but i dunno what the first part means.

 

[wfbberzerker]

<< hah, you know AOL IPs are blocked from AT, right? or has that changed? >>

i think they are just blocked from joining at forums, not visiting, so its still possible an aol user could read this information.