ANZ Hack attempt... [Fwd: Urgent Security Notice]

Hi all, Just got this in, might want to add some filters to your systems... http://www.anz.com.inetbankmain.isapdlls.net/a/ -----Forwarded Message-----

We're seeing a ton of these as well from a rather large pool of owned boxen. Subjects seen so far for those wanting to filter: Subject: ANZ Internet Banking Secure Subject: Customer notification: data confirmation Subject: Urgent Notification From Billing Department Subject: ANZ Internet Banking 0nline - CIient's DetaiIs Confirmation Subject: Official Information To ANZ Internet Banking Clients Subject: Customer service: your account in ANZ Internet Banking Subject: Urgent Notification From ANZ Internet Banking BiIIing Department Subject: URGENT SECURITY NOTIFICATION Subject: Important account notice Subject: ANZ Internet Banking Subject: Official Information For Client Subject: Important account notice Subject: Important Banking Mai This seems to getting rid of all of them. Don Gould wrote:

Mike Cooper
I've also seen these - Subject: IDENTITY THEFT SOLUTIONS FROM ANZ INTERNET BANKING Subject: URGENT SECURITY NOTICE Subject: Customer Notice: Data Confirmation Subject: ANZ INTERNET BANKING BILLING DEPARTMENT: IMPORTANT Subject: Important notice from ANZ Internet banking Subject: IMPORTANT BANK MAIL Happy POETS day, Jamie

All of the new ones seem to link back to
http://www.anz.com.inetbankmail.randomdomain.tld
-----Original Message-----
From: Jamie Riden
Sent: Friday, 24 March 2006 3:20 p.m.
To: nznog(a)list.waikato.ac.nz
Subject: Re: [nznog] ANZ Hack attempt... [Fwd: Urgent Security Notice]
Mike Cooper
I've also seen these - Subject: IDENTITY THEFT SOLUTIONS FROM ANZ INTERNET BANKING Subject: URGENT SECURITY NOTICE Subject: Customer Notice: Data Confirmation Subject: ANZ INTERNET BANKING BILLING DEPARTMENT: IMPORTANT Subject: Important notice from ANZ Internet banking Subject: IMPORTANT BANK MAIL Happy POETS day, Jamie _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

-----Original Message----- From: David Turnbull Sent: Friday, 24 March 2006 4:18 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] ANZ Hack attempt... [Fwd: Urgent Security Notice] All of the new ones seem to link back to http://www.anz.com.inetbankmail.randomdomain.tld Correction!! That should be inetbankmain not inetbankmail
participants (4)
-
David Turnbull
-
Don Gould
-
Jamie Riden
-
Mike Cooper