SecuObs.com http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com Phishing emails regarding UPS parcel: UPS: Tracking Number Notification http://tco/5uXKhOym2012-09-28 22:30:14 - mxlab : Phishing emails regarding UPS parcel: UPS: Tracking Number Notification http://tco/5uXKhOymhttp://www.secuobs.com/twitter/news/346849.shtmlhttp://www.secuobs.com/twitter/news/346849.shtml Belgium banks subject to phishing campaigns for several days by now http://tco/n6VlQ0JZSecuobs.com : 2012-09-27 08:04:12 - mxlab - Belgium banks subject to phishing campaigns for several days by now http://tco/n6VlQ0JZhttp://www.secuobs.com/twitter/news/346224.shtmlhttp://www.secuobs.com/twitter/news/346224.shtml Belgium bank Belfius target of phishing campaign http://tco/5cmTNw3hSecuobs.com : 2012-09-27 08:04:12 - mxlab - Belgium bank Belfius target of phishing campaign http://tco/5cmTNw3hhttp://www.secuobs.com/twitter/news/346223.shtmlhttp://www.secuobs.com/twitter/news/346223.shtml Bank van De Post subject in phishing campaign http://tco/kQaEaWNRSecuobs.com : 2012-08-11 08:39:06 - mxlab - Bank van De Post subject in phishing campaign http://tco/kQaEaWNRhttp://www.secuobs.com/twitter/news/339582.shtmlhttp://www.secuobs.com/twitter/news/339582.shtml New email bases threats based on obfuscated Javascript in Rabobank emails http://tco/4FdUisbrSecuobs.com : 2012-08-01 03:51:07 - mxlab - New email bases threats based on obfuscated Javascript in Rabobank emails http://tco/4FdUisbrhttp://www.secuobs.com/twitter/news/337312.shtmlhttp://www.secuobs.com/twitter/news/337312.shtml Email from American Airlines with image leads to malicious payload http://tco/W8grauCzSecuobs.com : 2012-07-26 23:14:11 - mxlab - Email from American Airlines with image leads to malicious payload http://tco/W8grauCzhttp://www.secuobs.com/twitter/news/336112.shtmlhttp://www.secuobs.com/twitter/news/336112.shtml More obfuscated Javascript in email messages ADP Funding Notification and ADP Security Management Update http://tco/wC8pZy17Secuobs.com : 2012-07-26 23:14:11 - mxlab - More obfuscated Javascript in email messages ADP Funding Notification and ADP Security Management Update http://tco/wC8pZy17http://www.secuobs.com/twitter/news/336111.shtmlhttp://www.secuobs.com/twitter/news/336111.shtml Phishing campaign targets users in the Netherlands http://tco/YplnVJfoSecuobs.com : 2012-07-26 23:14:11 - mxlab - Phishing campaign targets users in the Netherlands http://tco/YplnVJfohttp://www.secuobs.com/twitter/news/336110.shtmlhttp://www.secuobs.com/twitter/news/336110.shtml Massive phishing campaign targets ABN Amro/Rabobank users http://tco/d2m4IZZFSecuobs.com : 2012-06-29 04:34:13 - mxlab - Massive phishing campaign targets ABN Amro/Rabobank users http://tco/d2m4IZZFhttp://www.secuobs.com/twitter/news/330931.shtmlhttp://www.secuobs.com/twitter/news/330931.shtml FedEx phishing emails http://tco/tEXVPzczSecuobs.com : 2012-06-22 20:47:38 - mxlab - FedEx phishing emails http://tco/tEXVPzczhttp://www.secuobs.com/twitter/news/329486.shtmlhttp://www.secuobs.com/twitter/news/329486.shtml Dutch phishing emails targeting domains in Belgium and the Netherlands http://tco/5vp4fziRSecuobs.com : 2012-04-11 04:28:35 - mxlab - Dutch phishing emails targeting domains in Belgium and the Netherlands http://tco/5vp4fziRhttp://www.secuobs.com/twitter/news/311209.shtmlhttp://www.secuobs.com/twitter/news/311209.shtml Flashback-trojan infects 600000 MacOS X computers including 274 from Cupertino http://tco/3d1AelEOSecuobs.com : 2012-04-06 22:40:46 - mxlab - Flashback-trojan infects 600000 MacOS X computers including 274 from Cupertino http://tco/3d1AelEOhttp://www.secuobs.com/twitter/news/310088.shtmlhttp://www.secuobs.com/twitter/news/310088.shtml Emails regarding accountant license from AICPA leads to site with obfuscated Javascript exploit http://tco/TxIsGDumSecuobs.com : 2012-02-23 17:39:42 - mxlab - Emails regarding accountant license from AICPA leads to site with obfuscated Javascript exploit http://tco/TxIsGDumhttp://www.secuobs.com/twitter/news/296874.shtmlhttp://www.secuobs.com/twitter/news/296874.shtml New year gift from Amazon sent by a friend contains malware http://tco/4qsTWYPASecuobs.com : 2012-01-19 20:38:04 - mxlab - New year gift from Amazon sent by a friend contains malware http://tco/4qsTWYPAhttp://www.secuobs.com/twitter/news/285479.shtmlhttp://www.secuobs.com/twitter/news/285479.shtml Rabobank phishing emails with attachment http://tco/mcHtVlXzSecuobs.com : 2011-11-30 01:08:23 - mxlab - Rabobank phishing emails with attachment http://tco/mcHtVlXzhttp://www.secuobs.com/twitter/news/270156.shtmlhttp://www.secuobs.com/twitter/news/270156.shtml Different versions of ABN AMRO phishing email in circulation http://tco/0xcFY7WASecuobs.com : 2011-11-24 00:14:42 - mxlab - Different versions of ABN AMRO phishing email in circulation http://tco/0xcFY7WAhttp://www.secuobs.com/twitter/news/268570.shtmlhttp://www.secuobs.com/twitter/news/268570.shtml SNS Bank subject in phishing campaign by email with attached web form http://tco/jVBelav1Secuobs.com : 2011-10-08 02:55:48 - mxlab - SNS Bank subject in phishing campaign by email with attached web form http://tco/jVBelav1http://www.secuobs.com/twitter/news/255372.shtmlhttp://www.secuobs.com/twitter/news/255372.shtml ING phishing email with a twist http://tco/wsKgpBkCSecuobs.com : 2011-10-03 14:53:44 - mxlab - ING phishing email with a twist http://tco/wsKgpBkChttp://www.secuobs.com/twitter/news/253801.shtmlhttp://www.secuobs.com/twitter/news/253801.shtml Paypal phishing emails with very nice campaign template http://tco/uBWYx7uKSecuobs.com : 2011-10-03 14:53:44 - mxlab - Paypal phishing emails with very nice campaign template http://tco/uBWYx7uKhttp://www.secuobs.com/twitter/news/253800.shtmlhttp://www.secuobs.com/twitter/news/253800.shtml Kelihos botnet taken down by Microsoft http://tco/zsVOvNxvSecuobs.com : 2011-09-29 06:19:24 - mxlab - Kelihos botnet taken down by Microsoft http://tco/zsVOvNxvhttp://www.secuobs.com/twitter/news/252354.shtmlhttp://www.secuobs.com/twitter/news/252354.shtml Google AdWords phishing campaign http://tco/4ZM9c8l3Secuobs.com : 2011-09-27 01:11:03 - mxlab - Google AdWords phishing campaign http://tco/4ZM9c8l3http://www.secuobs.com/twitter/news/251359.shtmlhttp://www.secuobs.com/twitter/news/251359.shtml FDIC email with attached trojan masked as PDF file http://tco/YgBmbi6fSecuobs.com : 2011-09-27 01:11:03 - mxlab - FDIC email with attached trojan masked as PDF file http://tco/YgBmbi6fhttp://www.secuobs.com/twitter/news/251358.shtmlhttp://www.secuobs.com/twitter/news/251358.shtml HM Revenue Customs phishing emails – continued http://wpme/p2prU-lISecuobs.com : 2011-08-31 02:44:17 - mxlab - HM Revenue Customs phishing emails – continued http://wpme/p2prU-lIhttp://www.secuobs.com/twitter/news/243223.shtmlhttp://www.secuobs.com/twitter/news/243223.shtml Google AdWords phishing attempt http://wpme/p2prU-n1Secuobs.com : 2011-07-26 03:14:18 - mxlab - Google AdWords phishing attempt http://wpme/p2prU-n1http://www.secuobs.com/twitter/news/231381.shtmlhttp://www.secuobs.com/twitter/news/231381.shtml Email with subject Re2: Order contains URL to malicious payload http://wpme/p2prU-mwSecuobs.com : 2011-05-06 10:54:24 - mxlab - Email with subject Re2: Order contains URL to malicious payload http://wpme/p2prU-mwhttp://www.secuobs.com/twitter/news/202926.shtmlhttp://www.secuobs.com/twitter/news/202926.shtml 2 DNS Name Servers of DNSBE experienced unusual high workload http://wpme/p2prU-m3Secuobs.com : 2011-04-06 01:22:50 - mxlab - 2 DNS Name Servers of DNSBE experienced unusual high workload http://wpme/p2prU-m3http://www.secuobs.com/twitter/news/192674.shtmlhttp://www.secuobs.com/twitter/news/192674.shtml HM Revenue Customs phishing emails – continued http://wpme/p2prU-lISecuobs.com : 2011-04-01 08:16:49 - mxlab - HM Revenue Customs phishing emails – continued http://wpme/p2prU-lIhttp://www.secuobs.com/twitter/news/191274.shtmlhttp://www.secuobs.com/twitter/news/191274.shtml Morrisons supermarkets subject for phishing campaign http://wpme/p2prU-kCSecuobs.com : 2011-03-14 13:38:40 - mxlab - Morrisons supermarkets subject for phishing campaign http://wpme/p2prU-kChttp://www.secuobs.com/twitter/news/184396.shtmlhttp://www.secuobs.com/twitter/news/184396.shtml Freebox phishing emails http://wpme/p2prU-kvSecuobs.com : 2011-03-09 04:14:17 - mxlab - Freebox phishing emails http://wpme/p2prU-kvhttp://www.secuobs.com/twitter/news/182287.shtmlhttp://www.secuobs.com/twitter/news/182287.shtml HM Revenue Customs phishing emails http://wpme/p2prU-jVSecuobs.com : 2011-01-28 02:06:47 - mxlab - HM Revenue Customs phishing emails http://wpme/p2prU-jVhttp://www.secuobs.com/twitter/news/167331.shtmlhttp://www.secuobs.com/twitter/news/167331.shtml Phishing targets BNP Paribas Fortis users in Belgium http://wpme/p2prU-j8Secuobs.com : 2010-11-20 02:48:12 - mxlab - Phishing targets BNP Paribas Fortis users in Belgium http://wpme/p2prU-j8http://www.secuobs.com/twitter/news/144342.shtmlhttp://www.secuobs.com/twitter/news/144342.shtml Casino spam leads to malware payload http://wpme/p2prU-iWSecuobs.com : 2010-11-06 11:05:59 - mxlab - Casino spam leads to malware payload http://wpme/p2prU-iWhttp://www.secuobs.com/twitter/news/139694.shtmlhttp://www.secuobs.com/twitter/news/139694.shtml Bredolab botnet taken down http://wpme/p2prU-iOSecuobs.com : 2010-10-27 23:56:51 - mxlab - Bredolab botnet taken down http://wpme/p2prU-iOhttp://www.secuobs.com/twitter/news/135833.shtmlhttp://www.secuobs.com/twitter/news/135833.shtml Malicious spam campaign regarding VOIP Addons for Skype - the story goes on http://wpme/p2prU-ieSecuobs.com : 2010-09-30 18:01:31 - mxlab - Malicious spam campaign regarding VOIP Addons for Skype - the story goes on http://wpme/p2prU-iehttp://www.secuobs.com/twitter/news/127220.shtmlhttp://www.secuobs.com/twitter/news/127220.shtml Malicious emails lead to rogue AV software antivirus_24exe http://wpme/p2prU-gpSecuobs.com : 2010-09-18 06:10:54 - mxlab - Malicious emails lead to rogue AV software antivirus_24exe http://wpme/p2prU-gphttp://www.secuobs.com/twitter/news/122064.shtmlhttp://www.secuobs.com/twitter/news/122064.shtml Campaign with emails that lead to rogue AV software antivirus_24exe continues http://wpme/p2prU-gsSecuobs.com : 2010-09-18 06:10:54 - mxlab - Campaign with emails that lead to rogue AV software antivirus_24exe continues http://wpme/p2prU-gshttp://www.secuobs.com/twitter/news/122063.shtmlhttp://www.secuobs.com/twitter/news/122063.shtml Resume emails with attached file Resumehtml leads to rogue AV software http://wpme/p2prU-gNSecuobs.com : 2010-09-18 06:10:54 - mxlab - Resume emails with attached file Resumehtml leads to rogue AV software http://wpme/p2prU-gNhttp://www.secuobs.com/twitter/news/122062.shtmlhttp://www.secuobs.com/twitter/news/122062.shtml Analysis of rogue anti virus software http://wpme/p2prU-gTSecuobs.com : 2010-09-18 06:10:54 - mxlab - Analysis of rogue anti virus software http://wpme/p2prU-gThttp://www.secuobs.com/twitter/news/122061.shtmlhttp://www.secuobs.com/twitter/news/122061.shtml Malicious spam campaign regarding Adobe Acrobat 2010 PDF Reader and VOIP Addons for Skype http://wpme/p2prU-hmSecuobs.com : 2010-09-18 06:10:54 - mxlab - Malicious spam campaign regarding Adobe Acrobat 2010 PDF Reader and VOIP Addons for Skype http://wpme/p2prU-hmhttp://www.secuobs.com/twitter/news/122060.shtmlhttp://www.secuobs.com/twitter/news/122060.shtml Emails with the URL anoniemberichtjecom is a phishing attempt and will get a expensive SMS subscription http://wpme/p2prU-hrSecuobs.com : 2010-09-18 06:10:54 - mxlab - Emails with the URL anoniemberichtjecom is a phishing attempt and will get a expensive SMS subscription http://wpme/p2prU-hrhttp://www.secuobs.com/twitter/news/122059.shtmlhttp://www.secuobs.com/twitter/news/122059.shtml Emails offering PDF Reader 2010 lead to unsecure payment site http://wpme/p2prU-fzSecuobs.com : 2010-07-28 11:29:42 - mxlab - Emails offering PDF Reader 2010 lead to unsecure payment site http://wpme/p2prU-fzhttp://www.secuobs.com/twitter/news/119021.shtmlhttp://www.secuobs.com/twitter/news/119021.shtml Adobe Flash malware in what appears as phishing emails http://wpme/p2prU-frSecuobs.com : 2010-07-24 10:47:36 - mxlab - Adobe Flash malware in what appears as phishing emails http://wpme/p2prU-frhttp://www.secuobs.com/twitter/news/117723.shtmlhttp://www.secuobs.com/twitter/news/117723.shtml Amazon orders and email confirmation leads to PDF malware http://wpme/p2prU-fwSecuobs.com : 2010-07-24 10:47:36 - mxlab - Amazon orders and email confirmation leads to PDF malware http://wpme/p2prU-fwhttp://www.secuobs.com/twitter/news/117722.shtmlhttp://www.secuobs.com/twitter/news/117722.shtml New malspam regarding your Amazon order: Your order has been paid Parcel NR:58588-691 http://wpme/p2prU-dHSecuobs.com : 2010-05-18 01:49:34 - mxlab - New malspam regarding your Amazon order: Your order has been paid Parcel NR:58588-691 http://wpme/p2prU-dHhttp://www.secuobs.com/twitter/news/93906.shtmlhttp://www.secuobs.com/twitter/news/93906.shtml Phishing emails with attached HTML forms instead of embedded URLs http://wpme/p2prU-cESecuobs.com : 2010-03-14 10:15:08 - mxlab - Phishing emails with attached HTML forms instead of embedded URLs http://wpme/p2prU-cEhttp://www.secuobs.com/twitter/news/73432.shtmlhttp://www.secuobs.com/twitter/news/73432.shtml Facebook subject to campaign that combines phishing and malware http://bitly/6PRFy9Secuobs.com : 2009-12-09 05:27:01 - mxlab - Facebook subject to campaign that combines phishing and malware http://bitly/6PRFy9http://www.secuobs.com/twitter/news/45438.shtmlhttp://www.secuobs.com/twitter/news/45438.shtml MySpace subject to phishing campaign http://bitly/4FGzuiSecuobs.com : 2009-11-10 18:54:28 - mxlab - MySpace subject to phishing campaign http://bitly/4FGzuihttp://www.secuobs.com/twitter/news/36738.shtmlhttp://www.secuobs.com/twitter/news/36738.shtml Bredolab surges to new heights thanks to Cutwail botnet http://bitly/2WEHdkSecuobs.com : 2009-11-06 07:08:31 - mxlab - Bredolab surges to new heights thanks to Cutwail botnet http://bitly/2WEHdkhttp://www.secuobs.com/twitter/news/35744.shtmlhttp://www.secuobs.com/twitter/news/35744.shtml Facebook supposed phishing email leads to malware http://bitly/46BUaWSecuobs.com : 2009-11-01 18:15:53 - mxlab - Facebook supposed phishing email leads to malware http://bitly/46BUaWhttp://www.secuobs.com/twitter/news/34222.shtmlhttp://www.secuobs.com/twitter/news/34222.shtml Facebook phishing email http://bitly/1TbzVqSecuobs.com : 2009-10-31 09:55:31 - mxlab - Facebook phishing email http://bitly/1TbzVqhttp://www.secuobs.com/twitter/news/34015.shtmlhttp://www.secuobs.com/twitter/news/34015.shtml