2014-11-08 - PHISHING MESSAGES WITH LINKS TO FAKE WEBMAIL LOGIN PAGES
Today, I received a Hungarian phishing email from "webmail frissítés 2014" as a spoofed sender. This is the second Hungarian phishing email I've seen this week. Both have links to fake webmail login pages from Jigsy, a hosting provider based in Canada.
These fake sites were established through a free service. The first site was suspended, and I've notified the hosting provider for the second site.
- First fake webmail login: updattwergs.jigsy.com - 70.33.222.120 (website suspended)
- Second fake webmail login: updattwedf.jigsy.com - 70.33.222.169 (active as I write this)
These are not sophisticated phishing attempts, and most people would ignore them. I find this mildly interesting and thought I would share.
FIRST PHISHING ATTEMPT - 2014-11-05
EMAIL:
TRANSLATION:
PHISHING WEBSITE:
SECOND PHISHING ATTEMPT - 2014-11-08
EMAIL:
TRANSLATION:
PHISHING WEBSITE:
FINAL NOTES
No pcap files or malware for this blog post. Just some information on phishing attempts I've seen this past week.
Click here to return to the main page.