Phishing Raiffeisen / Bancpost
Verificaţi alerta referitoare la tentativele de fraudare a clienţilor băncii Raiffeisen aici.
În decursul zilei de azi, 26 martie 2009, mai multe mesaje de phishing (pentru Bancpost, Raiffeisen) au fost primite.
Adresele specificate sunt încă active! Nu accesaţi sau completaţi paginile specificate în aceste mesaje.
Aceste înşelătorii sunt similare având aceeaşi reţea din cadrul căreia au fost expediate, conţinutul mesajului asemănător, site-urile de phishing urmăresc o structură asemanătoare:
Conţinut mesaj phishing Bancpost (alerta aferentă acestuia o puteţi accesa aici):
Return-Path: <bancpostfastbanking@fastbankingbancpost.ro>
Received: from idcmail-mo2no.shaw.ca [64.59.134.9] by cert-drt
with ESMTP id 137B12; Thu, 26 Mar 2009 11:40:29 +0200
Message-Id: <79p70j$2econ8@pd7mo1no-svcs.prod.shaw.ca>
Received: from pd7ml2no-ssvc.prod.shaw.ca ([10.0.153.162])
by pd7mo1no-svcs.prod.shaw.ca with ESMTP; 26 Mar 2009 03:40:43 -0600
X-Cloudmark-SP-Filtered: true
X-Cloudmark-SP-Result: v=1.0 c=0 a=mRKlrltAAAAA:8 a=s7yRrNV8SjvCnEKVMYgA:9 a=ZDjXnYYtBfAD8TRrztsA:7 a=8yGYjZfHKBErU3lyB2Pk0DgUQJkA:4
Received: from s010600179a33498d.pi.shawcable.net (HELO User) ([70.67.71.163])
by pd7ml2no-dmz.prod.shaw.ca with SMTP; 26 Mar 2009 03:40:42 -0600
From: "Bancpost Fastbanking"<bancpostfastbanking@fastbankingbancpost.ro>
Subject: Atentionare client
Date: Thu, 26 Mar 2009 02:40:44 -0700
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
<html>
<body>
<a href="http://wurzelkraft.co.kr/public/css/cgi/bp/" target="_blank" title="Raiffeisen Online">
<img src="http://wurzelkraft.co.kr/public/css/cgi/bp/bp.gif" border="0"></a>
</body>
</html>
Conţinut mesaj phishing Raiffeisen:
Return-Path: <rzbsales@rzb-sales.ro>
Received: from idcmail-mo2no.shaw.ca [64.59.134.9] by cert-drt
with ESMTP id 3DDF19; Thu, 26 Mar 2009 13:43:54 +0200
Message-Id: <79pc8o$2rg9mv@pd6mo1no-svcs.prod.shaw.ca>
Received: from pd6ml2no-ssvc.prod.shaw.ca ([10.0.153.163])
by pd6mo1no-svcs.prod.shaw.ca with ESMTP; 26 Mar 2009 05:44:10 -0600
X-Cloudmark-SP-Filtered: true
X-Cloudmark-SP-Result: v=1.0 c=0 a=-NFZZ8d8AAAA:8 a=yP9qhDoZ_uS_exL615kA:9
a=_1BWOE1B4cGKRtHSG70A:7 a=KrNanQyLJr0tmdaBgmbwl0BQyO4A:4
Received: from s0106000acd0b1981.hn.shawcable.net (HELO User) ([24.65.148.45])
by pd6ml2no-dmz.prod.shaw.ca with SMTP; 26 Mar 2009 05:44:09 -0600
From: "Raiffeisen Online"<rzbsales@rzb-sales.ro>
Subject: Atentionare client
Date: Thu, 26 Mar 2009 05:44:14 -0600
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
<html>
<body>
<a href="http://www.forca.org/img/css/cgi/rf/" target="_blank" title="Raiffeisen Online">
<img src="http://www.forca.org/img/css/cgi/rf/rf.jpg" border="0"></a>
</body>
</html>
Capturi ecran ale mesajului şi site-ului:
