- NZNOG - lists.nznog.org

NZ use of AusCERT
by Jonathan Brewer 11 Dec '05

11 Dec '05

Hi folks, Are there many among us who are members of AusCERT? Any in the practice of reporting incidents on NZ based hosts to AusCERT? Do AusCERT care to hear about incidents from non-members? Cheers, Jon

2 1

woosh
by Garrrett Stoupe 11 Dec '05

11 Dec '05

Can someone from woosh please contact me off list

1 0

National Bank Phising Scam
by Ashley Petherick 10 Dec '05

10 Dec '05

Morning all, awoke today to a National bank Phishing scam - a pretty ugly one, they didnt put much effort into the email, but the 'verification web page' looks pretty authentic (save the URL http://202.93.254.35:443/cxk/) They ask for your First and Last name, and credit card number, your ATM PIN, and expiration date. Sent from security(a)nationalbank.co.nz / Subject - Verification Required I have advised the site. Account Confirmation Required! Valued National Bank Client, Recently there have been a large number of identity theft attempts targeting National Bank customers. In order to safeguard your account we require that you verify your banking details. This process is mandatory. You may do so by clicking Here <http://202.93.254.35:443/cxk/> <a href="http://202.93.254.35:443/cxk/"> and submitting the required information. Failure to do so may result in a temporary cessation of your account services pending submission. Thank you for your prompt attention to this matter and your co-operation in helping us maintain the integrity of our customers accounts. Please do not reply to this e-mail, as this is an unmonitored alias. If you require further assistance refer to our support centre <http://nationalbank.co.nz/personal/contacts/> <A HREF="http://nationalbank.co.nz/personal/contacts/" TARGET="_blank">. National Bank respects your privacy. Click here <http://nationalbank.co.nz/terms/default.htm> <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank"> to read the National Bank Group Privacy Policy Statement. Electronic Banking services are issued by the National Bank of New Zealand (Electronic Banking services include telephone banking, Netbank and Bpay). A Product Disclosure Statement (PDS) <http://nationalbank.co.nz/terms/default.htm> <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank"> is available for these products on this website or from any branch of the National Bank. © 2005 The National Bank of New Zealand, part of ANZ National Bank Limited

1 0

Re: [nznog] (OT?) Phishers targetting Kiwibank
by Donald Neal 08 Dec '05

08 Dec '05

Andy Linton wrote: > > It would be good if these phishing discussions focussed on > technical aspects > of what can be done by people on this list once the list > knows about the > latest scam. The banks I suspect will make their own > decisions without seeking > advice here. > This thread should now turn to a technical topic or go away. - Donald Neal NZNOG List Administrator Donald Neal |"You know what young, carnivorous, Support Engineer |alien mammal-like monsters are like. NGN Operations |Always getting into scrapes." Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

4 3

(OT?) Phishers targetting Kiwibank
by Lesley Walker 08 Dec '05

08 Dec '05

I've received a reasonably plausible-looking phish for Kiwibank, appears to have originated in Washington DC. The domain it uses is "kiwibahk.com", registered through bookmyname.com, and I have sent a complaint to the registrar. Does anyone want a copy for reference? Lesley W

11 10

Re: [nznog] (OT?) Phishers targetting Kiwibank
by Regan Murphy 07 Dec '05

07 Dec '05

> They shut down their whole Internet banking site because of a > phishing email ! I would have thought that was somewhat of an > over reaction. That would sure annoy me if I happened to be > one of their customers. Well they wouldn't be the first bank to take this sort of action.... -- Regan

2 1

TelstraClear Down?
by jfp 04 Dec '05

04 Dec '05

Does anybody know what's up with TelstraClear. I can't get to their nameservers from NZ or the US. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer Phone (+64-9) 358 2081 Clearfield Software Ltd Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place Mob (+64-21) 640 779 P O Box 3901 Auckland, New Zealand ------------------------------------------------------------------------

3 3

Re: [nznog] TelstraClear down
by Stewart Fleming 04 Dec '05

04 Dec '05

DNS certainly gone bang. IP routing still working, but very slow. Denial of service attack? Had a call from my Telstra rep earlier, but that was for a billing error outstanding since February. Maybe they keep the DNS records in the same file...? -- Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET http://networkstatus.telstraclear.co.nz/home/clearnet.html. Reason: DNS lookup failure for: networkstatus.telstraclear.co.nz Apache/2.0.52 (Unix) Server at networkstatus.telstraclear.co.nz Port 80 Traceroute from TC frame relay hosted in ChCh to www.xtra.co.nz 3 218.101.61.74 (218.101.61.74) 28.325 ms 21.328 ms 27.119 ms 4 218.101.61.69 (218.101.61.69) 25.932 ms 18.852 ms 40.947 ms 5 218.101.61.33 (218.101.61.33) 17.685 ms 28.273 ms 124.740 ms 6 ggis-gige-v906.telstraclear.net (203.98.18.67) 43.038 ms 42.818 ms 15.735 ms 7 g0-1-0-4.akcr8.global-gateway.net.nz (210.55.202.49) 18.469 ms 36.399 ms 28.106 ms 8 v4.aksw7.global-gateway.net.nz (210.55.202.51) 46.682 ms 36.813 ms 43.531 ms 9 xtra-dom-2.aksw7.global-gateway.net.nz (203.96.120.150) 32.408 ms 18.452 ms 39.837 ms

3 2

Re: [nznog] TelstraClear Down?
by Simon Allard 04 Dec '05

04 Dec '05

Just the nameservers? They have probably been ACL'ed to stop DNS DDoS attacks, like what xtra etc have done. Simon Allard ihug Limited P +64 9 962 9827 M +64 21 456 412 E simon.allard(a)staff.ihug.co.nz > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Monday, 5 December 2005 10:20 a.m. > To: NZNOG(a)list.waikato.ac.nz > Subject: [nznog] TelstraClear Down? > > > Does anybody know what's up with TelstraClear. I can't get to their > nameservers from NZ or the US. > > > jfp. > > ------------------------------------------------------------------------ > Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer > Phone (+64-9) 358 2081 Clearfield Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place > Mob (+64-21) 640 779 P O Box 3901 Auckland, New Zealand > ------------------------------------------------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog

10 13

Re: [nznog] TelstraClear Down?
by Peter Mott 04 Dec '05

04 Dec '05

Maybe there was an imperical decision taken by AU head office to close it down due to lack of profits. :-) regards Peter Mott MOTT & ASSOCIATES Tel: +64 9 488 9352 Fax: +64 9 486 7017 -/-

2 1