Scam/Hack via IM

[Xioup]

You'd be surprised how many people fall for phishers.

[Mr-Trainor]

this is what happened to me saying can i dj for ur site,
i was about to go on it.. but i thought again

theres alot of people who will keep asking you about dj'ing but they've stopped now since i didnt fall for it :p

*text removed*

Edited by Slowpoke (Forum Moderator): Please do not post links to phish sites, even as a warning.

[Monkwrestler]

so how does this exactly work javascript??? as my sister went on a site and it got here and she didn't even notice

[Meanies]

Surely thats not a fake login, since he never said he logged in on the site, simply that when he was on the site he kept getting disconnected due to someone else logging into the account, so surely its a session stealer?

[Stacker]

This person on IM sent out a invite saying "You scammin nub i saw you scam on this site" etc. I just removed him straight away. People scamming these day's! How low can you get.

[Moh]

so how does this exactly work javascript??? as my sister went on a site and it got here and she didn't even notice

Its just a simple php script.
Instead of creating a session, it just inserts your details into a database, or even just emails them to an email. Then it redirects you to a page saying that your d/ced.

Surely thats not a fake login, since he never said he logged in on the site, simply that when he was on the site he kept getting disconnected due to someone else logging into the account, so surely its a session stealer?

I thought they patched that up?
Then again, I think the sessions only last up to 15 mins? As you always have to re authorise to do stuff now

[Independent]

My Freind JUST Now Told Me About That. She Said Ok I'll Visit It But I Just About Stopped Her. Thank You Alot!

*text removed*

Lucky enough that you changed your password in time though.

Edited by Slowpoke (Forum Moderator): Please do not make irrelevant comments just to bait users into an emotional response.

[Ugawa]

Someone tried that on me once wen the scam first came out, but luckily enough i noticed it ddn say habbo.co.uk in the bar

XX

[Muscroft.]

Ouch thats harsh >.< soz to hear.

[John!]

Its just a simple php script.
Instead of creating a session, it just inserts your details into a database, or even just emails them to an email. Then it redirects you to a page saying that your d/ced.

Nope, It uses javascript to hijack the client window and redirects to a page that says disconnected or logged out and then when you click "ok" there is a fake, phishing page which uses a php script to write your details to a text file.