Email Re-Directs & Spoofing!

Greetings to all,

So, the last time you logged into your personal web mail account, did you notice the URL?
Having it bookmarked doesn't mean it's the one you intended...

Did you know (without cheating) that email.yahoo.com redirects you to

https://login.yahoo.com/config/login_verify2?.intl=us&.src=ym ?

Or that even a GoDaddy email like email.godaddy.com redirects the user to

https://login.secureserver.net/index.php?app=wbe&domain=email.godaddy.com ?

What if you tried to login to your normal email and it went to login.secureserver.com (or whatever applies to your emails hosting server)... Would you notice?

A popular choice is Google Mail.

Did you know that Google's Gmail.com redirects you to

https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=llya694le36z&scc=1&ltmpl=default&ltmplcache=2&from=login

That is quite the URL!

So, I would bet that nobody would notice if it was slightly different, assuming the page looked the same.
Recently, this actually happened proving that even one of the biggest internet companies in the world can fall victim to determined hackers.

Google's email service was chosen for a 'phishing' scam.

Phishing is a type of attack where the hackers steal usernames and passwords from unsuspecting users by using a different login page that looks like the one you think you're on, only the fake web page captures your credentials and then redirects you to the real site.
Then, the hackers can access your account unknowingly to you and read through your every email.

Read more about phishing on wikipedia at Wikipedia on Phishing or any Tech News website.

Wikipedia Link: http://en.wikipedia.org/wiki/Phishing

The attack seemed to have targeted US government officials in an attempt to gather Google trade secrets and government information in light of the recent battle Google has had with the Chinese government. As stated in the article, all affected users have been contacted, but even the biggest, most trusted names on the internet are open to attacks.

Therefore, be mindful of the sites you're visiting and pay attention to the URLs and where you're being redirected.

With the internet being so open and everyone sharing their information online, it's easy to be a victim of an attack.
You might not be a government official, but I bet you have bank statements, family functions, and even information about other accounts in your inbox...

Be sure to read more about the Google phishing scam / attack!

Yahoo News Link: http://finance.yahoo.com/news/Google-says-Chinese-hackers-apf-891312078.html?x=0&sec=topStories&pos=4&asset=&ccode=

Be Safe!

Professionally,

G.E. Investigations, LLC
www.GeInvestigations.com
www.ExigentCircumstances.com
www.OnTheJobPI.com
www.SniperRecovery.com
866.3ISPY4U (866-347-7948)
602.266.ISPY (602-266-4779)
520.7ISPY4U (520-747-7948)
AIM / ICQ: DetectiveGE
Yahoo: GeInvestigations
NRA Certified Firearms Instructor
NRA Certified Range Safety Officer
AZ# 1003249
"Giving you... Just the Facts!"
Semper Fidelis!
"Assisting you in those times of EXIGENT CIRCUMSTANCES%u2026
When Waiting Isn't an Option!"