AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?date=2005-03-31
Updated March 31st 2005 21:25 UTC
"We received multiple reports about "BlueMountain Greeting Cards" being used to spread malware. The links read like they link to the bluemountain.com web site, but in fact they link to other sites not affiliated with bluemountain.com. The email headers are fake and not sent via bluemountain.com…
Typical content…:
From: [removed]
To: username
Subject: Username, You've received a postcard!
To view your eCard, choose from the options below. Click on the following link. hxxp://www.bluemountain.com/view.pd?i=156506081&m;=1195&rr;=y&source;=bma772
-OR-
Enter the following eCard Number, 117890283650, on our Card Pick Up Window at hxxp://www.bluemountain.com/findit.pd?source=bma838
If you have any comments or questions, please visit hxxp://www.bluemountain.com/customer/emailus.pd?source=bma085
Thanks for using BlueMountain.com…"
- http://isc.sans.org/diary.php?date=2005-03-31
Updated March 31st 2005 21:25 UTC
"We received multiple reports about "BlueMountain Greeting Cards" being used to spread malware. The links read like they link to the bluemountain.com web site, but in fact they link to other sites not affiliated with bluemountain.com. The email headers are fake and not sent via bluemountain.com…
Typical content…:
From: [removed]
To: username
Subject: Username, You've received a postcard!
To view your eCard, choose from the options below. Click on the following link. hxxp://www.bluemountain.com/view.pd?i=156506081&m;=1195&rr;=y&source;=bma772
-OR-
Enter the following eCard Number, 117890283650, on our Card Pick Up Window at hxxp://www.bluemountain.com/findit.pd?source=bma838
If you have any comments or questions, please visit hxxp://www.bluemountain.com/customer/emailus.pd?source=bma085
Thanks for using BlueMountain.com…"
