PHISHING Report / Denúncia de PHISHING

2013-10-02 Thread csirt
PHISHING ReportFraudsters put a malicious file or scriptin:https://microsoft-ie-explore-config-br.googlecode.com/svn/windows.microsoft.compt-BRinternet.pacThe contents of this file or script redirect traffic to a PHISHING website, wich attacks customers of Banco do Brasil (Bank of Brazil).In some cases, it is not possible to you to load thePHISHING contentsand will be displayed to you only a blank page or a "403 Forbidden Error". This is because fraudsters are using geolocation technology, so the website can identify and locate the user's IP address and it will display PHISHING contents only for brazilian users (IP addresses from Brazil). But we can guarantee that it is still there.Please contact the webmaster or the webhosting company in charge to remove the malicious file or script, stopping the illegal activity.Best regards,Banco do Brasil S.A.CSIRT - Computer Security Incident Response Teamab...@bb.com.br, cs...@bb.com.br






-- 
You received this message because you are subscribed to the Google Groups Project Hosting on Google Code group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-code-hosting+unsubscr...@googlegroups.com.
To post to this group, send email to google-code-hosting@googlegroups.com.
Visit this group at http://groups.google.com/group/google-code-hosting.
For more options, visit https://groups.google.com/groups/opt_out.


Re: PHISHING Report / Denúncia de PHISHING

2013-10-02 Thread Lucas Bergman
Thanks very much for the report.


On Wed, Oct 2, 2013 at 11:59 AM, cs...@bb.com.br wrote:

 PHISHING Report

 Fraudsters put a malicious file or script in:


 https://microsoft-ie-explore-config-br.googlecode.com/svn/windows.microsoft.compt-BRinternet.pac

 The contents of this file or script redirect traffic to a PHISHING
 website, wich attacks customers of Banco do Brasil (Bank of Brazil).

 In some cases, it is not possible to you to load the PHISHING contents and
 will be displayed to you only a blank page or a 403 Forbidden Error. This
 is because fraudsters are using geolocation technology, so the website can
 identify and locate the user's IP address and it will display PHISHING
 contents only for brazilian users (IP addresses from Brazil). But we can
 guarantee that it is still there.

 Please contact the webmaster or the webhosting company in charge to remove
 the malicious file or script, stopping the illegal activity.

 Best regards,

 Banco do Brasil S.A.
 CSIRT - Computer Security Incident Response Team
 ab...@bb.com.br, cs...@bb.com.br


   --
 You received this message because you are subscribed to the Google Groups
 Project Hosting on Google Code group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to google-code-hosting+unsubscr...@googlegroups.com.
 To post to this group, send email to google-code-hosting@googlegroups.com.
 Visit this group at http://groups.google.com/group/google-code-hosting.
 For more options, visit https://groups.google.com/groups/opt_out.


-- 
You received this message because you are subscribed to the Google Groups 
Project Hosting on Google Code group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-code-hosting+unsubscr...@googlegroups.com.
To post to this group, send email to google-code-hosting@googlegroups.com.
Visit this group at http://groups.google.com/group/google-code-hosting.
For more options, visit https://groups.google.com/groups/opt_out.