Author Topic: ALERT: Realistic-looking Yahoo! phishing email  (Read 3010 times)

0 Members and 1 Guest are viewing this topic.

Offline Anne

  • Administrator
  • Registered
  • *
  • Posts: 163
  • Gender: Female
    • Yobunny
ALERT: Realistic-looking Yahoo! phishing email
« on: June 08, 2012, 12:16:14 PM »
Latest phishing email received - trying to find Yahoo! login details. It's not genuine, so if you get one just delete it! It's skipping past the spam/scam filters in Yahoo's mail system as it's originating somewhere on the Yahoo! network, probably on the infected/compromised computer of a legit user.

If you've had one and entered your login details, go to your genuine yahoo! account address (at yahoo.com) and change the password immediately, or contact Yahoo! support http://help.yahoo.com/l/us/yahoo/helpcentral/

Quote
X-Apparently-To: <removedID>@yahoo.co.uk via 77.238.189.183; Fri, 08 Jun 2012 06:28:04 +0000
Received-SPF: none (domain of btinternet.com does not designate permitted sender hosts)
X-YMailISG: WTOaXSUWLDta.KpGx0XDYOjDuJt1ACtbwlkcgCKlkcFSF9ro
 4aYLIaXJC3.olVB_N3p9kkW6bcXke0beKVq8P56BgH9sEh8qjNCzFBT7VK8Y
 .jiN_xp8V16tGUzemfPCaPW_0Ol7Fw4xF2SPI2lJU0knRnuamJhfKl5lgInQ
 vEj23CyMKyhhhXWEzdYUSsj8Z3CLLXuYnvOLGqWVt8U5BZ.t.2_vOWPMA6fC
 bn5xP1P.Dhk1VYLGqPoh80XtNJDxldOstbEkajp6yRtlEO4H0a7oUtF2aSpI
 ZDQ7dKIOhXkQAcsnvz1gMHDjh06hyN40h17xwlHNAoxppdgZf1dqqOhtCu.g
 .s55V7I5mcMpBeF2A8H2YiEr8BXmDl83fFVDn9EJcNPc1D9Q0UysvxFp3b2G
 uWSToZ2anK_Bc7Bkf94fxUU.2MflLj5zN86QGzI_04fO0LcVZgtAx2DazMmZ
 CJWuhdusoOfk0nITESLbZvc5E3AW2u5.vLkSILvVpsomfexjqHcJATRwWqU_
 uEsqiWji48WSVWd_GnGKrmz2e5t.rQr_5WnLMISmWB5j9z920KjBehhT.gGH
 Rs6QoWecMUslTRyWb8bApoJtUf9rc.jx_FyCMLVe39TZy3lrNjCO3mPkxph8
 6du0LH068AntQdiwQ4K9LlDUttDlH18mZg93SDjsBuY7mp_ei17eURRrIaJM
 ZCn___79dUmCU.P7jndqULa0a9e2A.K_yJQFxlSqVKavr3ZIHyMAlJJTR03m
 DQ1ez5_EtyDW429u_xn7UivuUcIrVKNpkzPay7QM2PHiNcfiGY.M1l7DOqDt
 Rmv9ayZ8knGAx2Ar6WgFezii1AHnYLEsmdenQkt9kxdiSx1oJJSQ83O2Sycx
 591.n._effnGOIYAneGpw.6iBQjdqqDOwCRNGxq4gLL3qNPjQaXfFYMIP9HI
 ubu0l2YBh2hm1Jjd_53efyuVTLmDZh.fZMQIk8SEXX8ccmNREjCTxELqLT0g
 4Xmw9tbyCqxGb2wA1KthxK.228saebfzyPzxJqwhiLJS6DpMjyo3dIJ0Cug0
 gHz.pEpsUZFiPwSt.6zEDCtajYSoOZbuBaTddq6f0hv7bwGH_e03T.2hYQDI
 NLZxA7Yv.mrFOh08oR7JJVBArgr.6Buf6FzuPwfScwKa
X-Originating-IP: [212.82.108.138]
Authentication-Results: mta1031.mail.ukl.yahoo.com  from=btinternet.com; domainkeys=pass (ok);  from=btinternet.com; dkim=pass (ok)
Received: from 127.0.0.1  (HELO nm23.bullet.mail.ird.yahoo.com) (212.82.108.138)
  by mta1031.mail.ukl.yahoo.com with SMTP; Fri, 08 Jun 2012 06:28:04 +0000
Received: from [77.238.189.52] by nm23.bullet.mail.ird.yahoo.com with NNFMP; 08 Jun 2012 06:28:04 -0000
Received: from [212.82.108.227] by tm5.bullet.mail.ird.yahoo.com with NNFMP; 08 Jun 2012 06:28:04 -0000
Received: from [127.0.0.1] by omp1004.bt.mail.ird.yahoo.com with NNFMP; 08 Jun 2012 06:28:04 -0000
X-Yahoo-Newman-Id: 563218.30291.bm@omp1004.bt.mail.ird.yahoo.com
Received: (qmail 90058 invoked by uid 60001); 8 Jun 2012 06:28:04 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com; s=s1024; t=1339136884; bh=Kzo66lBPCzjNvxloTuV3QaxrwlTdFqc0Cxn3icK9uoQ=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=nsi2pGeoicLxkpQ9FSkIZAbMVakJYGsQguMusvNwbYKoY1N4x2L1cbqdrh0RiLXKdJShyxyFSGVKPPg1XjGBnEnnG6YmRpdrsFCtYQUHkqgajQP2dWT5WD+HrG0UdVBKSZkChF1MNsf+QeaTXuj8J7EZ6/Mji1D5L+tq23v5ox0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=btinternet.com;
  h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
  b=W3PwZeocAdbWSRX7pEuE69BCDEfARkTLZ8/BXaqBpAUX/jR8E0+djGnz2TmyYJW6aQX8k9146WEj+bae2AkYfJNK3fANogkTVm+wBkkVIBUfb/qcoRIw+0CSnuakv+1Rh+CdqVluq2I/bWFsoQebSvRfYJJshTmBZp4DfH9n8js=;
X-YMail-OSG: Jhi8814VM1kZfvRkllxgU1YU9miA358ILpsDODtC2gAB9Ma
 HApc16B4Kk3iQFaDxs5LTo5MUUR0USh6RQn3Ays4qJkZvUWT3ee8xcMdEmpW
 fTbFPCpnI8mvE7NRDNRpCYUxBG5BbhJN.ivB1nFuOtvGsa0pitWaXpB11x2j
 tXrntQd9jujWMv3kPvgwAJgrcskuMtiq5PgHcd7rVmyljPSnRrBH1bDsDQ8Y
 jAer7pYucpoQLa801pBOJw1MS7xJOnVhjeNi5GRx1DbJ46lUq50y0T1XdZsi
 Ti9Z7lwdh3zYNprIkakrUIvxRtbIBFPnRofSl0SdEhJwSPl9SLyUihqFfSZY
 8HIU9VRh9WL5.TTqB1gDeVWSEsNmR2LOeMdNbXwFgAVZ4i26bLnBQBjYYugc
 m5X3CF8wFH.9ZGxBPv1gX_yanRQj0Xmy8yIRwZrVvmF39d.24zyVTBfjVL3J
 dZPCHSykoOGR.d3KQD97jDWA40qQrcXvtXxImVaorolZ3Dd3_qBTkrB02590
 7MMxICj9wNyGgL54Tv6nl5xK8FoRRlfe2xwA1G325SlmiWxP2kIqKyjT0zA0
 LcVoX335PiNIRwLuFDLqCcujAn27LV0VXm3XMJkdS3PgK.y8o3K9iLUt01G8
 dl2qwEItgccbGxmQspfDt5S53e245JTYPqLjdEod0FqJ.kIWu3KhgKNaVhD.
 tPCerZq1Fe7k8c1rxkrkOnZHdfIr2H08XzBeCtV9CAx7.nSLhMsWWeqaMc5A
 8ricd3R.6
Received: from [82.128.45.77] by web87701.mail.ir2.yahoo.com via HTTP; Fri, 08 Jun 2012 07:28:04 BST
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.118.349524
Message-ID: <1339136884.81224.YahooMailClassic@web87701.mail.ir2.yahoo.com>
Date: Fri, 8 Jun 2012 07:28:04 +0100 (BST)
From: Mail! Center <dgr988@btinternet.com>
Subject: Yahoo Mail Update 2012 (c)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-503279681-1097220662-1339136884=:81224"
X-EsetId: 2E61252FDFB678693167257DD5E03438

---503279681-1097220662-1339136884=:81224
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Please verify your account by clicking the link below:

Click Here.

---503279681-1097220662-1339136884=:81224
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"=
top" style=3D"font: inherit;">Please verify your account by clicking the li=
nk below:<br><br><a href=3D"http://jdjdikjdjhjfhgjkfjffhffhfjjh.hoe.so/yak.=
html" target=3D"_blank">Click Here</a>.</td></tr></table>
---503279681-1097220662-1339136884=:81224--
Cheers, 
Anne, Board Admin

 

SMF spam blocked by CleanTalk