[SURBL-Discuss] Fw: heads up, massive phishing going on.

David B Funk dbfunk at engineering.uiowa.edu
Thu Apr 28 20:21:57 CEST 2005


On Thu, 28 Apr 2005, Kevin A. McGrail wrote:

> >From a guy I trust and work on anti-spam algorithm's who also works at Network Solutions:
>
>
> The system running here detected a rash of ebay and paypal phishing earlier today and it is still going on.  Hope this info can help find and stop it before someone gets damaged.
>
>
>
> Here are the IP addresses of the mail servers sending them and the sites they point to.  84.0.191.93: http://61.8.248.242/paypal/

Submit a few samples of those to SURBL so the target URL gets listed.
Also feed them to the ClamAV people (http://www.clamav.net/).

ClamAv now has anti-phishing rules in its virus scanner and recently I've
seen its blocked phishes outnumber the blocked viri.



-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{


More information about the Discuss mailing list