Fighting malware and spam

Slick Click Trick

UH!Caption!HTML

  31 March 2006

Description

Exploit a bug in Internet Explorer to display one link (the real eBay link) yet when clicked the link within the table is actually navigated. Notice the use of a style to change the cursor to make the link appear valid and even the color is set to the 'visited link' color.

Submitted by Kevin McGrail.

Example

<a href="https://signin.ebay.com/ws/eBayISAPI.dll">
<table>
<caption>
<a href="http://211.254.130.108XXX/">
<u style="cursor: pointer">
<font color="#008000">eBay Update Center</font>
</u>
</a>
</caption>
</table>
</a>