Quote from: robkohr on May 25, 2012, 05:38:40 PM

So I have received two baited emails in the last two days. I am only going to guess that the crackers are using the leaked db emails from the security failure in gox from a while back, and many other people should watch out for them.

Today's email:

Code:

info@mtgox.com via km33.hostsila.org
11:29 PM (11 hours ago)
Reply
to me
Dear Mt.Gox user,

Your account is currently pending review, please visit https://mtgox.com/forms/verification
For those users who have had their accounts marked for review, an explanation of why were are implementing these security measures can be found here:

Security Measures Explained <-- (this links to a fake login at http://f3w4twfe.tmweb.ru/)

'Verified' Accounts are eligible for monthly/daily transaction limits of up to 5 times the monthly limit and 10 times the daily limit.

In order to apply for the 'Verified' account status please attach a copy of the following documents:
- Your government issued photo ID (passport, permanent residence card or drivers license) and
- A scan of either your monthly utility bill (power, phone, TV, gas, water, etc.) or a certificate of residency issued by your local government.

Thanks,
The Mt.Gox team

And yesterday's email (if you click the link it will bring you to a page which has an auto-download for a likely infected xls file):

Code:

info@ecurrencyinfo.net via carens.websitewelcome.com
11:45 AM (22 hours ago)
Reply
to me

Invitation to ecurrency conference.

http://asiaelektronik.com/docs/processdl.html

Please let us know if you interested.

Thanks & Regards

I am sure they will send many more messages trying to infect my machine or reveal my gox password (amusingly I have never had any money in gox). Just watch out, and be suspicious of all emails.

If anyone feels semi-vigilantie, feel free to whois the domains and track down the ips to shut down these sites. I am a little geek-overloaded with other stuff today.

Hello,

Thank you for the phishing report. We have already reported this phishing site to have it shut down. Thank you once again for the continued support to Mt.Gox.

Mt.Gox_Natalie

Posts

Merits