🚀 go-pugleaf

Folgende Meldung habe ich soeben via WebForm an PayPal geschickt:
[meldung]
Hello,

I just received the e-mail you will find attached to the end of this message.
When I checked out the sourcecode of the e-mail I found out that the form does
not link to PayPal, but to
http://server50.hypermart.net/paypal1/cgi-bin/form2.cgi instead. I think
someone set up this CGI at Hypermart to steal mail addresses and passwords of
PayPal users. Under http://server50.hypermart.net/paypal1/cgi-bin/ there are
two text files containing a password and a lot of e-mail addresses. Under
http://server50.hypermart.net/paypal1/ there are some pictures used to fake a
PayPal website within the e-mail.

I hope this information helps you to shutdown the fraudulent website and to
keep your service secure.

Don't hesitate to contact me if you need further information.

Yours sincerely,

Mike Pfaff

[... Kopie des Fake-Mails ...]
[/meldung]

>M�chtest du gerne den Script und witere Files, welche hinter sich diesem
>Mail verstecken?

Wie konntest Du die Scripts downloaden(Sind ja executable)? BTW: password.txt
enth�lt anscheinend ein verschl�sseltes Passwort zu subscribe.pl

Bye,

Mike