Sunday, May 15, 2016

Download your pending document via Dropbox 13-53-09 (Dropbox Phishing)

Hello *@*

You have a pending incoming document shared with you via Dropbox

Dropbox makes it easy to create, store and share online documents, spreadsheets and presentations.

lClick here to view shared docs.

Thanks!
- The Dropbox Team
© 2016 Dropbox

Phishing analysis :

CLICK : lClick here to view shared docs.
OPEN : http://bit.ly/1Y7zmlo
REDIRECT http://www.wmh11.conticom.pl/media/mailto/load_content.php
ADRESS BAR : Change to base64 (data:text/html;charset=utf-8;base64)
SCREENSHOT :


FORM (HTML) : http://homedecoration.pw/mickyrosay/finish.php
CLICK : Sign In
SCREENSHOT :


CLICK : Validate
REDIRECT : https://www.dropbox.com/business?_camp=email_basic&oref=e&_tk=email&_ad=39078

Email analysis :

NOTE : dm3@customerserviceprovider.onmicrosoft.com
NOTE : antcear960@gmail.com
NOTE : X-Organization : yksvextavevak21954
NOTE : X-Author : yksvextavevak21955
NOTE : X-Originating-Ip : [88.51.212.130]

No comments:

Post a Comment