« Heroine Sheik |


| Construction of ICANN's Red Light District Put On Hold »

December 01, 2005

IRS Offers Up Stupid Redirect Links To Help Phishers Steal Money

Too many sites that are trying to track what people click on when leaving a site offer up "open redirect links" which basically let's a site append an outside URL to the end of one of its own URLs and have traffic flow right through to that second site. This may be useful in easily tracking what links people click on to leave a site, but they're also perfect for phishing scammers, who use them to trick people into believing that they're going to a legitimate site. And, what better site to scam people than the IRS's site? Turns out that the IRS's special govbenefits.gov site uses open redirects that phishers are already using to steal money. They convince people they're going to the IRS site, when they're simply passing right through to the scammer's site. Our tax money at work. Update: Good point made in the comments. The site itself is not actually the IRS's but another government agency's. The scam, however, is about a tax refund.

Posted by dymaxion at December 1, 2005 11:14 PM


Post a comment

Remember Me?