full-disclosure - Re: Western Union Certificate Error

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 8 Sep 2011 14:07:30 -0700
From: Gage Bystrom <themadichib0d@...il.com>
To: JT S <whytehorse@...il.com>, full-disclosure@...ts.grok.org.uk
Subject: Re: Western Union Certificate Error

Comodo got hacked awhile back and mass certificates compromised,
judging by that certificate you probably encountered one of the stolen
ones.

On Wed, Sep 7, 2011 at 7:40 AM, JT S <whytehorse@...il.com> wrote:
> I recently got this error "You attempted to reach
> www.westernunion.com, but instead you actually reached a server
> identifying itself as wumt.westernunion.com. This may be caused by a
> misconfiguration on the server or by something more serious. An
> attacker on your network could be trying to get you to visit a fake
> (and potentially harmful) version of www.westernunion.com. You should
> not proceed."
> Attached is a screenshot of the error and certificate info. SHA-256=9F
> 26 1E 37 F3 6A 34 88 AD 65 54 88 E0 5C 8A 13
> C6 69 D4 FE 2A 25 0F DA 2C 51 13 1E 08 F8 DA 6F
>
> Cert was issued by Comodo
>
> A google of the SHA comes up with ICANN but other sites come up with
> nothing... And then I read from comodo themselves they got breached
> and fraudulent certs were issued...
> http://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html
>
>
> CONFIDENTIALITY NOTICE This E-Mail transmission (and/or the documents
> accompanying it) is for the sole use of the intended recipient(s) and
> may contain information protected by the attorney-client privilege,
> the attorney-work-product doctrine or other applicable privileges or
> confidentiality laws or regulations. If you are not an intended
> recipient, you may not review, use, copy, disclose or distribute this
> message or any of the information contained in this message to anyone.
> If you are not the intended recipient, please contact the sender by
> reply e-mail and destroy all copies of this message and any
> attachments.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/