funsec mailing list archives

fake aol phish


From: RandallM <randallm () fidmail com>
Date: Thu, 21 Jan 2010 12:07:00 -0600

just got this;


Below is an email that is apparently making its away around. It
“claims” to be from AOL but in fact it is not.

___________--

X-Barracuda-URL: http://spamfilter.magnetllc.com:80/cgi-bin/mark.cgi
Received: from 187-3-126-17-sa.cpe.vivax.com.br (localhost [127.0.0.1]) by
 spamfilter.magnetllc.com (Spam & Virus Firewall) with ESMTP    id 9607323854E;
 Thu, 21 Jan 2010 11:24:20 -0600 (CST)
Received: from 187-3-126-17-sa.cpe.vivax.com.br
 (187-3-126-17-sa.cpe.vivax.com.br [187.3.126.17]) by spamfilter.magnetllc.com
 with ESMTP id KXsZSsOBiRm9MlaJ; Thu, 21 Jan 2010 11:24:20 -0600 (CST)
X-Barracuda-Envelope-From: amassiu6 () sistemasmodernos com
--------------------------------

Link given:
-------------------------------
In order to install the update use <a
href="http://update.aol.com.favuccacom.im/products/aimController.php?code=2730617734263790301869543724996333950132&email=XXXXX
 () magnetllc com">the
following link</a>
-------------------


Original:
---------------------
Dear AIM user,

Your AIM account is flagged as inactive. Within the following 72 hours
it’ll be deleted from the system.

If you plan to use this account in the future, you have to download
and launch the latest update for the AIM. This update is critical.

In order to install the update use the (removed, see above) following
link. This link is generated exclusively for your account and is
available within a certain period of time. As soon as this link is not
available anymore you will get another letter.

Thank you,

AIM Service Team


This e-mail has been sent from an e-mail address that is not
monitored. Please do not reply to this message. We are unable to
respond to any replies.






-- 
been great, thanks
RandyM
a.k.a System

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: