[nsp-sec] AS 33597 (Infolayer / Jabry) / AS 30496 (Colo4 / Formbuddy)- Phishing page UPC NL

[Stijn Jonker]

Hello,

Is AS33597 Infolayer or their customer Jabry and/or AS 30496 Colo4 or their customer formbuddy.com represented or does somebody have contacts?

They are hosting an phishing page with the form at formbuddy.com at:

hXXp://users3. jabry. com/myway111/Upgradeupc.html

The form is hosted at formbuddy.com with the full url being: hXXp://www. formbuddy. com/cgi-bin/form.pl
Username: snap111

The form seems to be over quota, so some users must have submitted some data unfortunately. If the username part can be provided this would be much appreciated as any help to get this down.

Thanks,
Stijn

--
Yours Sincerly,

Stijn Jonker - Security Manager
LGI / UPC - sjonker at lgi.com
SJCJonker at SJC.nl / +31 20 7789993
Primary AS 6830

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 203 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20121009/b53f5728/attachment-0001.sig>