WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST
By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.
It is safe to open it, it asks you to select an email provider, so after clicking the relevant icon a small form appears prompting for email and password.
This is 100% fake and the purpose is to collect email/password information from innocent victims.
I made a quick analysis and was able to download a ZIP file, containing the files hosted behind the malicious link. There are PHP (server-side) files, executed when the user clicks the "Sign in" button. Here is the contents of one of the PHP files:
I can clearly see this code is constructing a message, containing the email and password entered by the victim, also the client IP address and some other stupid lines ("Created By HollyD"). Then this message is sent to the following address:
It will open a directory contents, download the properties.zip file. The code listed above I extracted from gmail.php - the other php files in fact perform exactly the same thing - sending victim's email and password to this same email address:
_________________ verry soon you obituary will be anoused. you dont know those guys are mafians and they are now after you . mumu. rest in peace
"I DENOUNCE THE MUFFIN MEN" - Ma Kim
"YOU ARE WALKING DEAD MAN. YOUR WOODEN COFFIN IS READY TO SWALLOW YOU AND YOUR DIRTY GENERATION"
x 4 x 1644 x 1904 - Fake cheques: $4,392,620.83
Team Woody - Ghana to Singapore - 11535km
zzz Master Baiter
Joined: 14 Jun 2012
Wed Jun 27, 2012 11:07 am
^^^ Reported to Google.
Can a mod close this thread please?
_________________ x4 x 14
"Idiot you are such a moron, article of no commercial value uncircumcised baboon, moron of a frog"
"WHERE DID YOU LEARN THOSE CUT AND JOIN ENGLISH, WOW! IT SOUNDS VERY INTERESTING. CAN YOU MAKE A LINE OF GOOD GRAMMAR?"
"You email has been received and from my understanding your email is not well understood."
woody999 Dormain Reshuffler
Joined: 30 May 2009
Location: East of Humptulips
Wed Jun 27, 2012 1:02 pm
Marking as n/a and can be moved offline
_________________ "thank you for making me a fool" CC lad
"I lost my assories" Barr. Angus Bu...g
"YOU NEED SOME DOCTOR" Barrister Peter Paul
I dont know who is lieing ,either you or F3lcha1r
is annoying to watch my email for a whole day and not read from you-
>172 x 190 x2
View next topic View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum