VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, [2], 3, 4 ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 22:49:02 08/20/04 Fri
Author: repost
Subject: Proxypot

Friday morning (GMT time) my proxypot caught several phish emails which try
to mislead postbank.de customers. The recipients are asked to submit
details of their bankcard info on http://www.postbanks.info (down) .
I have informed security @ postbank.de about this, but I am not sure whether
that email will be read by the right person.

Anyway: the senders of the phish email connected to my proxypot from IP
address 67.19.94.242 and 67.19.139.74 which belong to theplanet.com IP
space. Earlier these proxy hijackers tried to send emails advertizing

newoemsoft.biz
mailfromlady.com
newmailforyou.net
nm.ru
netfirms.com
rulanda.com
bang-videos.biz
hard-incest.biz
stop-the-war.biz
meetwithladies.com
bestladyforyou.com
plasma-connection.com


The proxy hijackers make use of a Belarussian proxy service advertized at
http://65.75.177.179:8080 .

A sample of the offending message (HTML <> -> [])

Return-Path:
Delivered-To:
Received: from MUNGED ([67.19.139.74]) MUNGED
with MUNGED
(attempted proxy to MUNGED:25);
Fri, 20 Aug 2004 MUNGED
Date: MUNGED
From: www.postbank.de
To: MUNGED
Subject: Postbank Sicherheitsaktualisierung
MIME-Version: 1.0
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: 8bit

[!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"]
[!-- saved from url=(0059)http://216.157.154.147/
InternetFraud_Gold-Cyber_EngGerm.htm --]
[HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"][HEAD][TITLE]Financial institutions
around the world have always been subject to attempts by criminals to try
and defraud money from them a[/TITLE]
[META http-equiv=Content-Type content="text/html; charset=windows-1251"]
[/HEAD]
[BODY lang=EN-AU style="tab-interval: 36.0pt"]
[DIV class=Section1]
[TABLE width="69%" border=0]
[TBODY]
[TR bgColor=#ffcc00]
[TD][IMG src="https://banking.postbank.de/gif/pblogo.gif"][/TD][/TR]
[TR bgColor=#ffcc00]
[TD height=12] [/TD][/TR]
[TR]
[TD][![if !supportEmptyParas]] [![endif]][o:p][/o:p]
[P style="MARGIN-LEFT: 9pt"][SPAN lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt;
mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: DE"][!
[if !supportEmptyParas]][![endif]] [o:p][/o:p][/SPAN][/P]
[P style="MARGIN-LEFT: 9pt"][SPAN lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt;
mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: DE"]Die
Finanzinstitutionen der ganzen Welt und ihre Kunden haben immer dadurch
gelitten, daß die Kriminellen versucht haben, das Geld auf
betrügerischer Weise abzuholen. Diese Versuche können auf
unterschiedliche Weise vorgenommen werden (zum Beispiel durch
Fälschung der Kreditkarten, durch unerlaubte Benutzung des Telefons
oder Internets).[/SPAN][SPAN lang=DE style="mso-ansi-language: DE"][o:p][
o:p][/SPAN][/P]
[P style="MARGIN-LEFT: 9pt"][SPAN lang=DE style="mso-ansi-language: DE"][!
[if !supportEmptyParas]][![endif]] [o:p][/o:p][/SPAN][/P]
[P style="MARGIN-LEFT: 9pt"][SPAN lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt;
mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: DE"]Im
Rahmen unserer Verpflichtung, allen Kunden bestmögliche Leistungen
anzubieten, würden wir jeden von Ihnen bitten, einmal im Monat Ihr
Konto zu überprüfen. [/SPAN][SPAN lang=DE
style="mso-ansi-language: DE"][o:p][/o:p][/SPAN][/P]
[P style="MARGIN-LEFT: 9pt"][SPAN lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt;
mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: DE"]Um
Ihr persönliches "Postbank"- Konto zu überprüfen, öffnen
Sie die nachfolgend angegebene Website[/SPAN][SPAN lang=DE
style="mso-ansi-language: DE"]: [o:p][/o:p][/SPAN][/P]
[P style="TEXT-ALIGN: center" align=center][SPAN lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt;
mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: DE"][a
href="http://POSTBANKS.INFO"]https://www.postbank.de/[/a][/SPAN][SPAN
lang=DE style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size:
12.0pt; mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: DE"][
SPAN][SPAN lang=DE style="mso-ansi-language: DE"][o:p][/o:p][/SPAN][/P]
[P style="MARGIN-LEFT: 9pt"][SPAN lang=DE style="FONT-SIZE: 10pt;
FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt; mso-bidi-font-family:
'Times New Roman'; mso-ansi-language: DE"]Diese Sicherheitsmaßnahmen
sind erforderlich, um Ihr Konto zu schützen. Wir bitten um
Entschuldigung für mögliche Unbequemlichkeiten. Wir sind uns
sicher, daß diese zusätzliche Vorsichtsmaßnahme im
Endergebnis den Schutz ihrer Konten rund um die Uhr sichert.

<>



--
feike

[ Next Thread | Previous Thread | Next Message | Previous Message ]
[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.