Symantec Blogs: Security ResponseSyndicate content

Stephen Doherty | May 30th, 2006
0 comments

n regards to my previous blog about the social engineering attack that occurred recently on Ladbrokespoker.com, it seems as though the problem with rogue phishing messages is still causing havoc with some online poker rooms. The following fake message was sent to Ladbrokespoker.com users from May 16th to May 17th (Monday night to Tuesday afternoon):

“ATTENTION PLAYERS: THE FIRST 10 PLAYERS WHO WILL VISIT THE SITE (http://www.ladbrokes-winners.com/) THEY WILL BE AWARDED WITH THE AMAZING PRICE OF $10,000. HURRY!!!!”

Ladbrokespoker.com are currently promoting their upcoming 500 millionth poker hand, and are offering over $60,000 in cash prizes. The timing of these unofficial message boxes will certainly influence the...

Stephen Doherty | May 23rd, 2006
0 comments

t was a quiet Thursday night on May 11, 2006, when I decided to try my hand in a poker tournament on the Ladbrokespoker.com Web site. Ladbrokespoker.com is the busiest poker site in Europe with regular traffic of more than 5,000 players, usually reaching its peak in the evening hours.

Ladbrokespoker.com is powered by the Microgaming Poker Network, and promotes upcoming poker events by periodically sending a simple message box to all of their clients. However, on this particular Thursday night, instead of receiving a message box promoting an upcoming tournament, I received a message box that stated the following:

“Dear Ladbrokes Members : An employee of LADBROKES.COM steals $30,000,000 (Thirty-Million-Dollars) from Ladbrokes players accounts, all the players have the right to know ... http://www.ladbrokes-bbc.net/”

To the untrained eye, the URL in the message box appeared to be for an official BBC Web site; however, it linked to a site that was a spoof,...