[nsp-sec] Phishing site against Mexican Government at AS29873

[David Jiménez]

Hi folks,

We have been notified that the following URL:

http://www.condusef.info/

is hosting a fraudulent website against the Mexican Government (Secretariat
for Finance and Public Credit), that is used to steal credit card
information from the victims whom received the attached message (in
spanish). The website is being hosted at 209.59.218.122 at AS29873:

AS      | IP               | BGP Prefix          | CC | Registry |
Allocated  | AS Name
29873   | 209.59.218.122   | 209.59.216.0/21     | US | arin     |
2004-07-30 | BIZLAND-SD - The Endurance International Group, Inc.

We would like to ask you:

* to help us cease this activity and shut down this site;

* if possible, according to your policies, if you can share with us any
flows, logs and/or other information regarding the publication or access to
this website.

Kind regards,

-- 

---
David Jimenez | CERT-MX Operations Center
--------------------------------------------------------------
Mexican National CSIRT
Federal Police / E-Crime Unit
Email: cert-mx at ssp.gob.mx
Phishing Report: phishing at ssp.gob.mx
PGP Key: 1937 EF11 0521 B628 7228 4699 2BAE 4D94 778B 188