MS reclame via phishing spam?

Article View: be.comp.security

Article #438

#438

From: Cyrano
Date: Sun, 24 Jul 2005 07:22

37 lines
1939 bytes

Hi,



New to me:

Een phishing email die zich voordoet als een poging tot het stelen van 
je paypal paswoord, maar resolvet in reclame voor Windows Vista...

Link uit de mail:

<http://http//www.nybt.de/.www.paypal.com/cgi-bin/webscr%3FPPREDIRECT%3DW
C2Zfg3SGcjDq7U8XiFfCA_U8Ct8JEdNt5OQZzgwly0a3bomFoZxvezo555mdHEVpFBXrnpixW
HQQFD84CpNHcN8DOWAyp_7UTWLBCHF4Jn2sRfj6o_AHl3TFW6qucNXbGm9rtjkbnN_kcnO/ww
w.paypal.com/>

resolvet naar:

<http://www.microsoft.com/>

en

<http//www.nybt.de/>

geeft hetzelfde...

Bovendien schijnt de link gefabriceerd te zijn voor FireFox. Safari 
vindt de server niet. 

Mail schijnt afkomstig te zijn van thousandpeak.com.


Anybody???

-- 
Watch it! My killfilter really kills!
<http://www.objectief.be/>

Technical Details

Message-ID: <cyrano.mac-EF68EB.09225424072005@europe.isp.giganews.com>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,a4cc1e1044bdde6b,start
X-Google-Attributes: gid113446,public
X-Google-Language: DUTCH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail
NNTP-Posting-Date: Sun, 24 Jul 2005 02:22:54 -0500
From: Cyrano <cyrano.mac@techemail.com>
Newsgroups: be.comp.security
Subject: MS reclame via phishing spam?
Organization: de Bergerac
User-Agent: MT-NewsWatcher/3.4 (PPC Mac OS X)
Date: Sun, 24 Jul 2005 09:22:54 +0200
Message-ID: <cyrano.mac-EF68EB.09225424072005@europe.isp.giganews.com>
Lines: 37
NNTP-Posting-Host: 81.11.227.34
X-Trace: sv3-Vq4XgbjgJq3qvCznsQKHc7RUSvRY4DylhJG7+ig/kfekIkvIO4mBw9cKwImY0vEtL8B1d1OwEkOc8a5!pt3uY3HoCs5QEx/iFdwF3kSuzsBxVl6DIHgtWmvABXNAbelo1laiHNvQatmPreOx9IUz+vhhZE6I!0IY8JzIY69IOp7GgIprXNUAYTaA=
X-Complaints-To: abuse@scarlet.be
X-DMCA-Complaints-To: abuse@scarlet.biz
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.32