28 Apr
2005
28 Apr
'05
8:21 p.m.
On Thu, 28 Apr 2005, Kevin A. McGrail wrote:
From a guy I trust and work on anti-spam algorithm's who also works at Network Solutions:
The system running here detected a rash of ebay and paypal phishing earlier today and it is still going on. Hope this info can help find and stop it before someone gets damaged.
Here are the IP addresses of the mail servers sending them and the sites they point to. 84.0.191.93: http://61.8.248.242/paypal/
Submit a few samples of those to SURBL so the target URL gets listed. Also feed them to the ClamAV people (http://www.clamav.net/).
ClamAv now has anti-phishing rules in its virus scanner and recently I've seen its blocked phishes outnumber the blocked viri.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{