full-disclosure - Another false Citibank e-mail...a new phishing?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <405CA675.8020304@gmx.net>
From: evilninja at gmx.net (Christian)
Subject: Another false Citibank e-mail...a new phishing?

Elia Florio wrote:
> I receveid this bad-spoofed-Citibank e-mail,
> which points to a PHP page which ask 
> for credit card number..........and stole it!!!
> Is it the next phishing e-mail ? 
> 
> The link points to http://218.36.71.193:443/citi/

i tried http://218.36.71.193/ then, this seems to be the home of
www.sk.com (from FAQ: What is SK?
SK is Korea?s fourth largest conglomerate and one of the leading 
business organizations in Asia...)

someone has set up a 2nd Apache on :443 (!SSL), and created /citi to 
phish credit card numbers??

Christian.
-- 
BOFH excuse #376:

Budget cuts forced us to sell all the power cords for the servers.