[nsp-sec] ATTN Google - Malware on a Googlegroups workspace -> setting for your mailbox copyright-abuse at columbia.edu are changed (fwd)

[Bill Owens]

On Mon, May 10, 2010 at 12:13:50PM -0400, Joel Rosenblatt wrote:
> ----------- nsp-security Confidential --------
> 

> Hi,
> 
> We have been getting these spear phising emails - the setup.zip file is 
> really a html file which downloads a java script - I renamed it setup.txt 
> and have attached it for your amusement.
> 
> Please whack that site.
> 
> Thank you,
> Joel

The Google site-whackers can add a few more sites to the list:

http://alieness.googlegroups.com/web/setup.zip
http://misterseven.googlegroups.com/web/setup.zip
http://settings-mailserv1.googlegroups.com/web/setup.zip
http://ecd112.googlegroups.com/web/setup.zip
http://bkaboy.googlegroups.com/web/setup.zip
http://mamapapabrat.googlegroups.com/web/setup.zip
http://startersss.googlegroups.com/web/setup.zip
http://goooooog.googlegroups.com/web/setup.zip
http://smogggly.googlegroups.com/web/setup.zip
http://mimozkaa.googlegroups.com/web/setup.zip
http://zippiiix.googlegroups.com/web/setup.zip
http://creterx.googlegroups.com/web/setup.zip

These things have been coming in by the dozens for the last few days. . .

Bill.