[nsp-sec] EDU Phishing site

[Jeff Wolfe]

Jeff Wolfe wrote:
> ----------- nsp-security Confidential --------
> 
> 
> Hey All,
> 
> We're getting hit by a phishing run that tries to point our users to
> xxxx: //psu.edu.ec-uk.org, which hosts a clone of our single sign on page.
> 
> The resulting HTML uses a simple <form> POST to send the id and password
>  back to the same site.
> 
> Currently the hostname res

Gah. "Currently the hostname resolves to 72.127.89.94." Dunno where the 
other half of that sentence went.. :)

-JEff