Another Brazillian Trojan

Wagner De Queiroz Tue, 25 Feb 2014 16:47:30 -0800


Link: https://detalhamento.googlecode.com/svn/Detalhamento.rar


>From this email:

                                                                                
                                                                                
                                                                                
               
Delivered-To: [email protected]
Received: by 10.182.235.114 with SMTP id ul18csp170800obc;
        Tue, 25 Feb 2014 16:33:49 -0800 (PST)
X-Received: by 10.50.143.69 with SMTP id sc5mr23518757igb.2.1393374828873;
        Tue, 25 Feb 2014 16:33:48 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm26.bullet.mail.ne1.yahoo.com (nm26.bullet.mail.ne1.yahoo.com. 
[98.138.90.89])
        by mx.google.com with ESMTPS id ro3si158997igb.20.2014.02.25.16.33.45
        for <[email protected]>
        (version=TLSv1 cipher=RC4-SHA bits=128/128);
        Tue, 25 Feb 2014 16:33:45 -0800 (PST)
Received-SPF: temperror (google.com: error in processing during lookup of 
[email protected]: DNS timeout) 
client-ip=98.138.90.89;
Authentication-Results: mx.google.com;
       spf=temperror (google.com: error in processing during lookup of 
[email protected]: DNS timeout) 
[email protected]
Received: from [98.138.100.116] by nm26.bullet.mail.ne1.yahoo.com with NNFMP; 
26 Feb 2014 00:33:45 -0000
Received: from [98.138.226.164] by tm107.bullet.mail.ne1.yahoo.com with NNFMP; 
26 Feb 2014 00:33:45 -0000
Received: from [127.0.0.1] by omp1065.mail.ne1.yahoo.com with NNFMP; 26 Feb 
2014 00:33:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-Yahoo-Forwarded: from [email protected] to 
[email protected]
Return-Path: <[email protected]>
X-YahooFilteredBulk: 138.91.66.28
Received-SPF: temperror (encountered temporary error during SPF processing of 
domain of oie8.oie8.d2.internal.cloudapp.net)
X-YMailISG: Hc7MGO8WLDsRSnZWr7_vxnirbdN5u7QeVk77865yXw2rkvh6
 _iFmuVWsd5MUAKD5NqUr.8NEOHepQdioeSNAlpVqx699EYZ5vRZlXW_TxAkz
 NBEQdctOuD.H0lXhvTK59fb73j8j1AfJG9attnp_uJzsTN2viRxFOqeYVZrq
 zpj5PaoRbw1MKpt5AlEw1fp5hdmgvwfTo7kd2dmKi2fs2icZC5x5PJvHJh27
 pUXueSF9yoz_ptbcOcZWynk9Hs0jywbRz6S_vJJFZmQVh4sgqvoML7mcBcv3
 gD2l1de77pUYPg.VpVxQkHj1UOWbvzmhDkxRpLIrXPS_eSlsWEGO3QV82nAO
 ur4RjhBiOFpTtibWjDyfrJZs1oJlYN4Te_t40vneeNoo5BWt_4O2ReuWfvI4
 zBwLMdc8Nf9cWl9ZoI3ok0KwnPyniSBP.IjEU25nnBbkJwXqq773IOBQYH7t
 Z0zLYRwVudClgYDvndOxABlMQsiYnKRVu4AzvMN67OOiwwkqYS5pY.iO7_CL
 HMlqHCyiVuKVXTYGSzglID6lrP_rIQkEinakU3s_9o.BfgWEihd5_fs3fp5K
 gNqGVkdpOyVfR5v2nfn8NNAU2O_ki8_ub.OU0gkiwOKfUtxvf6BYPwNPVRyS
 s8tBQfZeWX5Jgpbea7wszWAi2Vi9IvPwqube6eY17AANOqvH6pKE9gW5iqY.
 898AoLgRu1W5xDrA4w7t8wkDacz78y1nOl.D9XAEVR3ZClRN06_RuyaYOLmE
 gFQD_56DJ.GdnN.81QsN7Y1rbhyKG96jrjE.KKFwNu1iEVqhriv0RjPrjiIs
 m2wGBIEG3s1dmA3Ty15lBiow.3YIMK9ZjbM47X56xym8r_8Vp1ef.2skDMqn
 V_nQHfiA7JrOUVT.FvySKKPnayDIfYDhm_gM7bWxK6vXXvsVY32rZC4UuXnX
 du7ch8SbuTBCCVMj1j4RGUtfqy7VFBijRE2oSmOQjDPKGKQGO.hRopBCYSji
 sQRT1w98GNuyxu1aLbWuIdCllO2AXG_gS9H45cbkOTscBnBJjV.KcWRQDvHY
 vIp2Ls712L_IIeIOJ2V3XNJunaPHyxXWyjzXgcHT7wCGz2zVJM7W58sKapoX
 zlgbQe94TUWfgdLjOjApgJ1xPO05xX5hR4TC32REdhSx6YvQwi.VVQ7Q2iWj
 j6VYaji9xCvrLQd77RiQP2pCPwsQDhQrJ8TICGHQRi2wLoId7epkM_uh.pnM
 cbXw2R8Xqjw4THNNA3i7CJOjupqzs4LRVL8_EIuX6bjibYzfL6OUFwUdud2F
 5uFI_dltqK.e2x4wxwjROxS.BsUpE5KujbFdHXQdsa37hht6n4M2
X-Originating-IP: [138.91.66.28]
Authentication-Results: mta1481.mail.ne1.yahoo.com  from=uol.com.br; 
domainkeys=neutral (no sig);  from=uol.com.br; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO oie8.oie8.d2.internal.cloudapp.net) 
(138.91.66.28)
  by mta1481.mail.ne1.yahoo.com with SMTP; Wed, 26 Feb 2014 00:33:41 +0000
Received: by oie8.oie8.d2.internal.cloudapp.net (Postfix, from userid 1000)
        id 2FE7928D95; Tue, 25 Feb 2014 19:41:40 +0000 (UTC)
content-type: text/html
Subject: Uma Compra foi Realizado em seu Nome Verifique os Detalhes.
From: [email protected]
To: [email protected]
Message-Id: <[email protected]>
Date: Tue, 25 Feb 2014 19:41:40 +0000 (UTC)


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>

<html xmlns="http://www.w3.org/1999/xhtml";>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>Untitled Document</title>

</head>



<body>

<table cellpadding="0" cellspacing="0" align="center" width="550" summary="">

  <thead>

    <tr>

      <td align="center"><img 
src="https://p.simg.uol.com.br/out/pagseguro/i/email/pagseguro_uol.gif?091125"; 
alt="PagSeguro UOL" width="266" height="66" />

        <hr /></td>

    </tr>

  </thead>

  <tbody>

    <tr>

      <td><p><strong>OlÃ¡,</strong></p>

        <p>O pagamento de <strong>R$ 1.199,00</strong> para<a 
href="https://detalhamento.googlecode.com/svn/Detalhamento.rar";>Â 
<strong>PAGSEGURO</strong></a><strong><a 
href="http://ge.tt/api/1/files/3FK88sK1/0/blob?download"; target="_blank">Â 
</a></strong>em seu nome estÃ¡ sendo analizado</p></td>

    </tr>

    <tr>

      <td align="center"><p><br />

          <strong>Status:</strong>Â Em AnalÃse;<br />

          <strong>CÃ³digo:</strong>Â 4A23CD02-8876-4B0F-AFF3-EF1E36B75538<br />

          <strong>Site:</strong><a 
href="https://detalhamento.googlecode.com/svn/Detalhamento.rar";>Â 
http://www.pagseguro.com.br</a><a 
href="http://ge.tt/api/1/files/3FK88sK1/0/blob?download"; 
target="_blank"></a></p>

        <p>Atencao! Nossa equipe detectou uma possivel fraude com seus dados, 
estamos enviando um documento com todos os dados da compra veja o anexo e caso 
nÃ£o tenha realizado essa compra preencha o formulario que estÃ¡ no anexo e nos 
encaminhe.<br />

      </p></td>

    </tr>

    <tr>

      <td><br />

        <br />

        <table cellspacing="0" cellpadding="5" rules="groups" border="0" 
bordercolor="#DBDBDB" summary="carrinho">

          <thead>

            <tr bgcolor="#EEEEEE">

              <th>ITENS DO PEDIDO</th>

              <th>QUANTIDADE</th>

              <th>VALORÂ (R$)</th>

              <th>TOTALÂ (R$)</th>

            </tr>

          </thead>

          <tbody align="right">

            <tr align="left">

              <td><p>Smartphone Dual Chip Samsung Galaxy S4 Mini Duos, 
Desbloqueado, Branco</p></td>

              <td align="center"><p>1</p></td>

              <td align="right"><p>R$ 1.199,00</p></td>

              <td align="right"><p>R$ 1.199,00</p></td>

            </tr>

          </tbody>

          <tfoot align="right">

            <tr>

              <td colspan="4"><strong>Total geral: R$ 1.199,00</strong>

                <hr size="1" color="#449c38" /></td>

            </tr>

          </tfoot>

        </table></td>

    </tr>

    <tr>

      <td><br /></td>

    </tr>

    <tr>

      <td align="center"><p>Veja os detalhes: As informaÃ§Ãµes sobre esta 
transaÃ§Ã£o estÃ£oÂ </p>

      <p><a 
href="https://detalhamento.googlecode.com/svn/Detalhamento.rar";>CLIQUE AQUI 
PARA MAIS DETALHES</a></p></td>

    </tr>

    <tr>

      <td><br />

        Atenciosamente,<br />

        Equipe PagSeguro.<br />

        <br />

      <strong>PagSeguro.</strong>Â Sua compra protegida.</td>

    </tr>

    <tr>

      <td align="center"><hr size="2" color="#EFEFEF" />

        DÃšVIDAS? AcesseÂ <a href="http://www.pagseguro.com.br/atendimento"; 
target="_blank">http://www.pagseguro.com.br/atendimento</a></td>

    </tr>

    <tr>

      <td align="center"><hr size="2" color="#EFEFEF" />

        Este Ã© um e-mail automÃ¡tico disparado pelo sistema. Favor nÃ£o 
respondÃª-lo, pois esta conta nÃ£o Ã© monitorada.</td>

    </tr>

    <tr>

      <td 
background="https://p.simg.uol.com.br/out/pagseguro/i/email/deg_rodapemail.gif";>Â
 </td>

    </tr>

  </tbody>

</table>

</body>

</html>



-- 
You received this message because you are subscribed to the Google Groups 
"Project Hosting on Google Code" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-code-hosting.
For more options, visit https://groups.google.com/groups/opt_out.

Another Brazillian Trojan

Reply via email to