My father applied for a new credit card the other day. MumbleBank sent him an email notifying him about some security arrangements for the new account — the details aren’t important. This mail contained HTML content, and a link to MumbleBank’s website where he had to configure something. This is where the fun begins.
The link’s text said mumblebank.com/creditcard. The link target was http://mumblebankcreditcard/foo/. Obviously these aren’t the same. He knows enough to hover the mouse over the link and to get nervous when the link text doesn’t match the target URI.
Continue reading In Soviet Russia, banks imitate scammers.
