Date Reported 13th February 2005
Apparent Sender MSN
Return Address Accounting Mngr < acc@msn.net >
Subject MSN Warning Message
Format HTML
Method Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.
Bogus Web Content? Yes
URL of web content http://202.157.81.28:880/?NTnjaFB=AGhbrTJntnzILhyWTcTxVpDvexInynPYVYZnRJCaY
cJKjtHTkppgHUBKrkaPAQNwONJTymTxprtABPuLhKRNFuAXFANgrCCtqmPPAymQQwrrmLf
vxXidrIbYjOeDrHKIUBzvaMlRjEkyqpTNncRGLTEXIIAbplKjMkGNYRGixQHNhBDwEwcqoHnZ
pOaGbLQOXxDWpifNbMDtohFTDHjTnyREnTkoFceDATzQQFGRtibTpGBUnKMDjGhyztNfv
RTWAhNrMukgDmNUUoNtbCKktTJTlyMTqvFRDtkpMwwpJjjEAZMBBzMIrxqFWfnmATgelqu
ZNQpycBdDAPeboRKTpdmltBAIvGMHXtHLZXjcymFZeJatCLcROoeYQEHlkvUiDBVCyfFXtjW
xUXQwITnzityaYfmiAtreInHttlfMwcjpZbMIUcidwHeuMrEnBXrjkatFlzrTBCZAEMjzOtDlbTGN
bkdCtvMtvgYTFqqhUpTyeRYUkBgliLbjXeLgAzzWGyElOVtIlbtqTgkfTqqQetccxNtYnTUVhz
hXuAHHCOYvWiBEBTwGlyTJmQTCzCxHbEEwfldHbcdYlECMyZuJxcuJTcltFJbGnFcuQgcTigR
vKviiuDTQGnCApOTWzUCNAFirLklVqeqczBkUffKKunkJdfHDZirAOBRCMfyeiOhIqtDwzohTD
rEHxkkxvDYjePMQWkWfbdNrxrNWHVOjntRLEdiZGtjKYXDViAajEOCbhpXOlMZBgRmKVxKC
FVnETQzcrAmWoOYxgWltIl&eml=x&U=PetBa
RISK LEVEL MEDIUM
WARNINGS 1. Email claims to be from MSN asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.
2. MSN never send users emails requesting details in this way.
3. URL of spoof website disguised as "Click here".
4. Real URL looks nothing like MSN!
5. Clicking on the link also sends your email address to the phishers!
" Dearest MSN customer, This is an automated email-notify sent to your registered email-address. "
If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
The Spoof Email ...
Dearest MSN customer,
This is an automated email-notify sent to your registered email-address.
Please do not reply to it as it will't reach the just department.
-
Recently there have been many reports of fraud activity regarding stolen account information and stolen identities.
This requires a full update on your records matching our database information to suit the future prolongation of account billing.
You will be prompted to provide full and complete information regarding your account with us just so you can identify your online personality.
Please take several minutes to fill out the forms.
Failure to update your online records will result in a halt of your account and a possible reactivation fee.
Please click here to refresh your billing data.
Thanks for using MSN,
MSNTech Supporting.
The Spoof Website ...
Spoof website not online at time of report...
|
