Author Topic: Mail server scam  (Read 3526 times)

0 Members and 1 Guest are viewing this topic.

Offline Anne

  • Administrator
  • Registered
  • *
  • Posts: 163
  • Gender: Female
    • Yobunny
Mail server scam
« on: October 23, 2009, 05:39:13 PM »
Just received this email which is purporting to come from our own mail server admin but it doesn't (cos that'd be me!)

If you get one of these please be aware that is DOES NOT come from us and it's some sort of malware download on a spoof site, so do not go there!

Quote
Attention!

  On October 22, 2009 server upgrade will take place. Due to this the
system may be offline for approximately half an hour.
The changes will concern security, reliability and performance of
mail service and the system as a whole.
For compatibility of your browsers and mail clients with upgraded
server software you should run SSl certificates update procedure.
 This procedure is quite simple. All you have to do is just to click
the link provided, to save the patch file and then to run it from your
computer location. That's all.

http://updates.burtonweb.org.uk.secure.cert-db.com/mail/id=7291567016-bads@burtonweb.org.uk-patch041.xxx (file suffix changed from executable to protect visitors.)

 Thank you in advance for your attention to this matter and sorry for
possible inconveniences.

 System Administrator

MacAfee Site Advisor and Web of Trust both notified of the malware / rating
« Last Edit: October 23, 2009, 05:50:47 PM by Anne »
Cheers, 
Anne, Board Admin

Offline Anne

  • Administrator
  • Registered
  • *
  • Posts: 163
  • Gender: Female
    • Yobunny
Re: Mail server scam
« Reply #1 on: October 23, 2009, 06:02:24 PM »
And another one with the same content but linking to a different (albeit still spoof) site:

Quote
Attention!

  On October 16, 2009 server upgrade will take place. Due to this the
system may be offline for approximately half an hour.
The changes will concern security, reliability and performance of
mail service and the system as a whole.
For compatibility of your browsers and mail clients with upgraded
server software you should run SSl certificates update procedure.
 This procedure is quite simple. All you have to do is just to click
the link provided, to save the patch file and then to run it from your
computer location. That's all.

http://updates.burtonweb.org.uk.secure.1ssl-certs.net/ssl/id=77482470-bads@burtonweb.org.uk-patch415.xxx (again munged to stop the executable working)

 Thank you in advance for your attention to this matter and sorry for
possible inconveniences.

 System Administrator
Cheers, 
Anne, Board Admin

 

SMF spam blocked by CleanTalk