2014-11-08 - PHISHING MESSAGES WITH LINKS TO FAKE WEBMAIL LOGIN PAGES

Today, I received a Hungarian phishing email from "webmail frissítés 2014" as a spoofed sender.  This is the second Hungarian phishing email I've seen this week.  Both have links to fake webmail login pages from Jigsy, a hosting provider based in Canada.

These fake sites were established through a free service.  The first site was suspended, and I've notified the hosting provider for the second site.

• First fake webmail login: updattwergs.jigsy[.]com - 70.33.222[.]120 (website suspended)
• Second fake webmail login: updattwedf.jigsy[.]com - 70.33.222[.]169 (active as I write this)

These are not sophisticated phishing attempts, and most people would ignore them.  But I find this mildly interesting, so I'm sharing the info.

 

FIRST PHISHING ATTEMPT - 2014-11-05

EMAIL:

 

TRANSLATION:

 

PHISHING WEBSITE:

 

SECOND PHISHING ATTEMPT - 2014-11-08

EMAIL:

 

TRANSLATION:

 

PHISHING WEBSITE:

 

FINAL NOTES

No pcap files or malware for this blog post.  Just some information on phishing attempts I've seen this past week.

Click here to return to the main page.