Michael Scheidell a écrit : > spam, with a url link in it that opens up a yahoo.com web mail page and > asks for yahoo.com credentials. > > don't know how that can help spammer, unless spammer is looking to only > get email from yahoo.com users. > > see line 119 (highighted) > > http://pastebin.com/m6bb65f86 > > so, interesting phish or stupid spammer with yahoo.com gooplet installed? >
this is not a phish. it's a 419 (AFF). spammer is asking the user to reply, and being "helpful", spammer provides a ready-to-compose yahoo link. spammer probably did a cut&paste of a link that works for yahoo users and thinks it is generic. unless he only targets yahoo users...
