[nsp-sec] Live Paypal phish

[Fronenbroek, Kick]

And one at:

hxxp://80.153.161.61/submit/webscrcmd=_login-run&dispatch=5885d80a13c0db1f998ca054efbdf2c29878a435fe324eec8ea269f5b79ff8ce/fr/Processing.php

AS      | IP               | AS Name
3320    | 80.153.161.61    | DTAG Deutsche Telekom AG


________________________________
From: Tarmo Randel <tarmo.randel at cert.ee>
Date: Fri, 12 Jun 2009 08:58:45 +0200
To: nsp-security NSP <nsp-security at puck.nether.net>
Subject: [nsp-sec] Live Paypal phish

----------- nsp-security Confidential --------

Hello,

hxxp://168.243.215.88/user/a/no.full


--

Tarmo Randel
CERT-EE




_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
community. Confidentiality is essential for effective Internet security counter-measures.
_______________________________________________