Scam's of 2008, Ready when you are.

A group of phishers have made available their scam pages to be used by the masses. A message posted on one of the underground forums consisting mainly of trojan writers, spammers, fraudsters and generally pleasant people encouraged more people to start phishing for logins. These scam's are available to download, and are well put together and tested.

These sites are all premade, containing all the relevant backends and server side code to make them work. All you'd need to start profiting from this is the ability to execute the included create scripts to make the database schema, a few email addresses (maybe 10 - 20 million ?) and a bit of patience.

Speaking about email addresses, you might think it would be hard to find a couple of hundred million addresses. Well, its not. You can buy them from your friendly email address vendor on a specific underground forum for a few hundred bucks.

Some examples of the premade scams available to download.

Index of what’s available

A myspace login phish

A Wow login phish

I didn't forget to show the entry posted by a member of the forum touting his wares. He is selling hacked email database of the following websites. The numbers next to the name is how many email addresses of registered users he is selling.

This will take a big botnet a day or two to send out.

He is also selling Paycom email addresses. Look at how many there are for each country, you can certainly do some nice spear phishing with those!