2014-11-08 - PHISHING MESSAGES WITH LINKS TO FAKE WEBMAIL LOGIN PAGES

Today, I received a Hungarian phishing email from "webmail frissítés 2014" as a spoofed sender.  This is the second Hungarian phishing email I've seen this week.  Both have links to fake webmail login pages from Jigsy, a hosting provider based in Canada.

These fake sites were established through a free service.  The first site was suspended, and I've notified the hosting provider for the second site.

• First fake webmail login: updattwergs.jigsy.com - 70.33.222.120 (website suspended)
• Second fake webmail login: updattwedf.jigsy.com - 70.33.222.169 (active as I write this)

These are not sophisticated phishing attempts, and most people would ignore them.  I find this mildly interesting and thought I would share.

 

FIRST PHISHING ATTEMPT - 2014-11-05

EMAIL:

 

TRANSLATION:

 

PHISHING WEBSITE:

 

SECOND PHISHING ATTEMPT - 2014-11-08

EMAIL:

 

TRANSLATION:

 

PHISHING WEBSITE:

 

FINAL NOTES

No pcap files or malware for this blog post.  Just some information on phishing attempts I've seen this past week.

Click here to return to the main page.