通过独立广告联盟赚钱

吖十的道理™:: The 10 Network ::

2008年11月3日星期一

屡出不穷的银行Phishing网页

今天又收到这样的email,碰巧今天有点闲就找找这网页的资料...

MBBPhishing

只要仔细的看,就不难发现其实这hyperlink是“误导”你去另外的网页。(看图中红圈的)

我尝试按下这hyperlink,原本想看看“它们”有多厉害?!哪里知道,原来我的游览器已经阻拦了....(看下图)。

MBBPhishingBlocked

  以下是这封电邮的Identity :

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
X-Message-Status: n:0
X-SID-PRA: Maybank Berhard Group <M2U-notice@maybank.com.my>
X-Message-Info: 6sSXyD95QpVexyjLvJvbnAwy1qysWLgHnEG2u/KA7HsK4YTYn+Mz9gZeflkHlaBuTAg7gwEx0kh5vpEWWULOAUn6TL1i9bE4
Received: from dizzy.rcom.com.ar ([200.68.95.210]) by bay0-mc2-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
     Sun, 2 Nov 2008 23:50:58 -0800
Received: from jay.rcom.com.ar (jay.rcom.com.ar [192.168.102.225])
    (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
    (No client certificate requested)
    by dizzy.rcom.com.ar (Postfix) with ESMTP id 1B276FAB5DB
    for <k2_lee@hotmail.com>; Mon,  3 Nov 2008 05:50:57 -0200 (ARST)
Received: by jay.rcom.com.ar (Postfix, from userid 48)
    id 8B49C18020; Mon,  3 Nov 2008 04:48:23 -0300 (ART)
To: xxxxxx@hotmail.com
Subject: Notice to M2U Users
From: Maybank Berhard Group <M2U-notice@maybank.com.my>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20081103075057.1B276FAB5DB@dizzy.rcom.com.ar>
Date: Mon,  3 Nov 2008 05:50:57 -0200 (ARST)
Return-Path: apache@localhost.rcom.com.ar
X-OriginalArrivalTime: 03 Nov 2008 07:50:58.0539 (UTC) FILETIME=[E8AEDBB0:01C93D88]

再查看看,原来这封电邮件是由阿根廷发出的,又或者该说是通过那里发出的(可能是VPN或其他方式)...

MBBPhishingDomain

MBBPhishingGeoLocation

哈!分享完毕...感觉有点无聊添!~

没有评论:

ShareThis