lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <405CA675.8020304@gmx.net> From: evilninja at gmx.net (Christian) Subject: Another false Citibank e-mail...a new phishing? Elia Florio wrote: > I receveid this bad-spoofed-Citibank e-mail, > which points to a PHP page which ask > for credit card number..........and stole it!!! > Is it the next phishing e-mail ? > > The link points to http://218.36.71.193:443/citi/ i tried http://218.36.71.193/ then, this seems to be the home of www.sk.com (from FAQ: What is SK? SK is Korea?s fourth largest conglomerate and one of the leading business organizations in Asia...) someone has set up a 2nd Apache on :443 (!SSL), and created /citi to phish credit card numbers?? Christian. -- BOFH excuse #376: Budget cuts forced us to sell all the power cords for the servers.
Powered by blists - more mailing lists