22 Feb
2006
22 Feb
'06
4:12 p.m.
Thunderbird
will display the URL of any link you hover over in an
email... so the email will say "www.ebay.com" and the actual displayed
link during the hover is "201.22.98.34/incoming/.ebay.com". I've never
been phished.
The trickier links exploit the more oddball features of browser addresses.
Some older versions of IE, for example will swallow things like
http://www.ebay.com at 1113982819/ (which actually references google).
Sufficiently obscure to fool the casual user.