Re: [nznog] New phish - Westpac

At 10:31 19/09/2005, Alastair Johnson wrote:

Morning

If anyone from Westpac Security monitors NZNOG, and for those that want to update their mail rulesets appropriately, there appears to be a new phish this morning for Westpac. I've received 6 in the last 10 minutes.

All originate from 219.128.152.213, a Chinanet host or 82.229.209.178.

The body refers people to http://secwestpac.com/IOLB/newSession .

I think you'll find that they're not originating from only two ip addresses, but rather from random zombied machines. My copy of this phishing email came from 84.105.36.75 which is a cable connection in Holland... Regards, Simon Byrnand iGRIN Internet