[nsp-sec] Google Docs phishing forms with TTL exceeded

[Krista Hickey]

I know it's not the fault of the Googlites that hang here and they're likely equally as frustrated but if you need more fodder for escalating then here are a few that were first reported 2013-02-06 10:00 EDT and they're still alive which is kinda making my abusedesk guys go batty,

https://docs.google.com/forms/d/1JWsTLM7x-Cbl7eFvXVPbCdo5ymLJJHf-V6hRn0WtpQs/viewform?pli=1
https://docs.google.com/forms/d/1-lbS7Ol6-UiPXL2bT-r79NK5JocmPZcsnpesRm6XS_k/viewform 

<insert another request for automated banhammer and/or priority queue here> as almost a week is a bit much

Thanks
Krista
7992


> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-
> bounces at puck.nether.net] On Behalf Of Leif Nixon
> Sent: Tuesday, February 12, 2013 5:20 AM
> To: nsp-sec
> Subject: [nsp-sec] Google Docs phishing forms with TTL exceeded
> 
> ----------- nsp-security Confidential --------
> 
> Hi googly people,
> 
> These forms were reportedly reported more than 24h ago:
> 
> https://docs.google.com/forms/d/1SVW6W6f4QZeHv2ZNxsT7Xw-
> AuogVAFY_mN4OmABPeJs/viewform
> https://docs.google.com/forms/d/1uJVYtiSDlVQiQpuB4U6uksXWcmnH70IkoIELe81
> qPis/viewform
> https://docs.google.com/forms/d/1ssmBjuA9apIk_XV-dg_EMmW5OmUrr7f-
> u9Ir0OtIoTI/viewform
> https://docs.google.com/forms/d/1saezJvzocfex1m1e3L4fmEBdwsKbj6QF-
> xYBSVRCjyQ/viewform
> https://docs.google.com/forms/d/12e_bLZQP81imkyCjCXbGHLmHH-
> IAkqkqxpeeXYX7UB4/viewform?pli=1
> https://docs.google.com/forms/d/1m0oAEJsBiWMVCp7j4knqb2-
> 1EPlug3JoQJ9pfzuR4_I/viewform
> https://docs.google.com/forms/d/1vX3Q3UNMpByiR2Oltt2olTU-
> UnqnOBLOxLOHO1BlU_g/viewform
> https://docs.google.com/forms/d/1TIQ5G2AXttJ6l9-hgDQIRDomE-tb04W6c-
> QSWrMPfe4/viewform
> https://docs.google.com/forms/d/1UNviiosanDj0cygkCQ1eQJPkcbZORPblV3Um4Cv
> kpQo/viewform
> https://docs.google.com/a/blumail.org/spreadsheet/viewform?formkey=dHl4d
> FpvUWdTZzd1NThfUFBTbzhPWnc6MQ
> 
> 
> --
> Leif Nixon - Security officer
> National Supercomputer Centre - Swedish National Infrastructure for
> Computing
> Nordic Data Grid Facility - European Grid Infrastructure
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-
> security
> community. Confidentiality is essential for effective Internet security
> counter-measures.
> _______________________________________________