Securehotel Web Services

  • Increase font size
  • Default font size
  • Decrease font size

Latest Refurbs

Bristol Estate Community

Care CoOps

Safetynet in Whitehawk and Manor Frarm.

YMCA/Princes Trust (Hove)

 

Vulnerable Extensions

combined phish and virus?

E-mail Print PDF

We usually get sent phish emails to see if they are legit but here is a  good one.

the email came from 123Greetings.com < This e-mail address is being protected from spambots. You need JavaScript enabled to view it >with an attachment ecard.zip which is a classic trojan virus.

The difference was the content of the email. See the screenshot.  This user just about managers their website and email let alone twitter.


The headers also give away some clues (sensitive info removed)

Return-path: < This e-mail address is being protected from spambots. You need JavaScript enabled to view it >
Envelope-to:
Delivery-date: Sun, 06 Jun 2010 10:38:07 -0500
Received: from [95.175.67.234] (port=2832)
(envelope-from < This e-mail address is being protected from spambots. You need JavaScript enabled to view it >)
id 1OLHuf-0002IV-LX
Received: from [95.175.67.234] by mailin-02.mx.aol.com; Sun, 6 Jun 2010 18:37:24 +0300
Date:    Sun, 6 Jun 2010 18:37:24 +0300
From:    "123Greetings.com" < This e-mail address is being protected from spambots. You need JavaScript enabled to view it >
X-Mailer: The Bat! (v3.64.05) Professional
Reply-To: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
X-Priority: 3 (Normal)
Message-ID: < This e-mail address is being protected from spambots. You need JavaScript enabled to view it >

Add comment


Security code
Refresh