TM I am reviewing the headers to see where it goes to including the href link. Dave
> David Milholen wrote: >> I had a customer send me an email that came to his inbox and it had a >> small paragraph that explained that squirrelmail users needed to upgrade >> to some new package due to some confusion with earlier releases and to >> click here for updates. >> I told him not to click anything and forward as an attachment so I >> could >> review it. When I clicked the link firefox told me the site was a >> phishing site and asked to continue. >> Anyone seen that before? >> TM >> DAVE >> >> > > from the squirrelmail site > > /quote > > *SECURITY: Spam Alert* > /Feb 23, 2009 by Paul Lesniewski/ > The spammer that has been sullying our good name for the past year > continues to send out huge amounts of spam encouraging people to > supposedly upgrade to what they claim is our newest version, 1.4.15. > That is in fact not our newest version, but moreover, they provide a > link in their spam that sends the victim to a login page that looks like > the normal SquirrelMail login page - if you input any credentials on > this page, of course, the spammer takes them and most likely uses them > to send spam from your email account. You can NEVER upgrade SquirrelMail > by simply "logging in" somewhere. The SquirrelMail team NEVER sends out > unsolicited email, especially any that require your personal email > username and password! > > /endquote > > > you should have squirrelmail-toaster-1.4.17-1.3.11 on your server as it > fixes a known security vulnerability. > > from the toaster site: > > *12/11/2008* - Updated Squirrelmail to 1.4.17 to resolve security > vulnerability CVE-2008-2379. > > > so, yeah, there is a 99% probability there is some social engineering > going on there. > > > -- > Regards, > fuzzy > > > --------------------------------------------------------------------------------- > Managed Qmailtoaster servers are now available > Visit http://qmailtoaster.com/QMTManaged.html to order yours today! > > Qmailtoaster is sponsored by Vickers Consulting Group > (www.vickersconsulting.com) > > Please visit qmailtoaster.com for the latest news, updates, and > packages. > > > To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com > For additional commands, e-mail: testing-h...@qmailtoaster.com > > > -- Wireless Etc David Milholen Lead Coordinator Phone:(501)318-1300 Email:dmilho...@wletc.com Web:www.wletc.com --------------------------------------------------------------------------------- Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
