Monday, December 19, 2016

Your account will be blocked!!! (Dropbox Phishing)

Dear User,

Your Mail Storage Limit has exceeded you might not be able to send or receive new messages; Click or Copy the link below onto your browser to verify your email and increase storage limit.

http://www.powerline.or.kr/zboard/data/dpbx/index.php

Note: Failure to heed strictly to this notification will lead to Email Account deletion thereby causing lost of files.

Thank you for using our mail system

Mail Administrator

Email analysis :

NOTE : hr@mail.com
NOTE : Received : from User (unknown [104.194.2.16])
NOTE : (Authenticated sender: admin) by mail.vps.com (Postfix)

Phishing analysis :

CLICK : http://www.powerline.or.kr/zboard/data/dpbx/index.php
OPEN : http://www.powerline.or.kr/zboard/data/dpbx/index.php
SCREENSHOT :


RESULT : Dropbox phishing
CLICK : Other Emails
SCREENSHOT :


CLICK : Submit
REDIRECT : https://www.dropbox.com/

Here is the information;MTCN; 2133097115

your first payment $5,000.00 sent to your name today and Here is the information;MTCN; 2133097115 SENDER NAME:Marcel Kimelman , track it now (www.westernunion.com) I told him to keep sending you $5,000.00 daily until the payment of ($1.200.000.00 usd dollars) is completed transfer to you and again forward them your Telephone number and adress so that they will be sure.
Contact Person:Dr.BERNARD ANDRE
E-mail (westeruniontransfer65@gmail.com)
Phone Number: +229-99060543
Thanks and hope to read from you soon,
PASTOR FRED WILSON
hope to read from you soon

Email analysis :

NOTE : westeruniontransfer65@gmail.com
NOTE : "W.W.W."@movie.ocn.ne.jp
NOTE : X-Originating-Ip : [64.134.96.77]