[4312] in Privacy_Forum
[ PRIVACY Forum ] Interesting malware/phishing technique I haven't
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Sun Aug 18 12:11:02 2013
Date: Sun, 18 Aug 2013 08:54:29 -0700
To: privacy-list@vortex.com
Message-ID: <20130818155429.GB21903@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Interesting malware/phishing technique I haven't seen before
Over at http://j.mp/16ziDjT (Google+) is a screen capture of a
somewhat interesting apparent malware/phishing attempt I haven't seen
before. A bunch of copies, all from different addresses, arrived
during the night to various addresses within my server cluster. As you
can see, it claims to be essentially a "blacklist reconsideration"
request. Because I do run a quite robust anti-spam system including
blacklists, I do deal with these, but this one had a bunch of red
flags (we'll ignore the spelling errors). As noted, it came from
various addresses to various addresses (most of the latter being
inappropriate). Inspection of headers showed typical spam/phish
obfuscations. Presumably the main malware payload is at the "dynamoo"
URL. So, there was no chance of my falling for it, but it is an
interesting approach that I thought appropriate to note publicly here.
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
