Check your server for PayPal, eBay, USBank spoofs!!

Hi All,

recently I have been having problems with fraudulent clients uploading fake payment pages identical to that of PayPal, eBay, USBank.

I have now got a script to search for any pages:

find /home/sites -regex '.*.\(php\|htm\|html\|shtml\)' -exec grep 'usbank.com' '{}' ';' -print
find /home/sites -regex '.*.\(php\|htm\|html\|shtml\)' -exec grep 'store.eart*****.net' '{}' ';' -print
find /home/sites -regex '.*.\(php\|htm\|html\|shtml\)' -exec grep 'signin.ebay.com' '{}' ';' -print
find /home/sites -regex '.*.\(php\|htm\|html\|shtml\)' -exec grep 'PayPal. All rights reserved.' '{}' ';' -print

I know its a bit of a hack job but its important to stop these. They do the industry so much damage!

 

 

 

 

Top