Twitter Phishing eMail

DIN 4844-2 Warnung vor einer Gefahrenstelle

Eine Twitter Phishing eMail ist unterwegs

Per eMail hatte ich heute eine Info über eine ausstehende Nachricht auf Twitter in meinem Posteingang. Irritiert hatte mich die Tatsache, dass die Info über eine email-Adresse kam, die mit keinem Twitter-Konto verbunden ist. Ein Grund für mich, hier einmal genauer hin zu schauen.

Tw_Phishing_01

Ein ganz klar vorne weg, Twitter verschickt keine Infos über ausstehende Nachrichten!

Die Info ist gut gemacht, allerdings ohne jegliche Twitter Logos und ohne die übliche persönliche Anrede. Statt dessen nur einen Link zu der angeblichen Nachricht.

Warnung 24x24 Warnung: Alle Links in dieser eMail führen auf folgende Weiterleitungs-Adresse: http://122.155.6.25/~meechok/iranize.html

Wer sich für den Quellcode interessiert, den habe ich hier mit eingefügt.

Quellcode der eMail:

X-Account-Key: account6
X-UIDL: 0LpBSP-1QUnfs3OU8-00fNQM
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from [212.85.97.169] (helo=v000423.home.net.pl)
	by mx35.web.de with smtp (WEB.DE 4.110 #2)
	id 1PsSiD-00039X-00
	for XXXXXX@XXXXXX; Thu, 24 Feb 2011 05:21:57 +0100
Received: by mx005.twitter.com (Postfix, from userid 1853)
        id 0745A6EB7E3; Thu, 24 Feb 2011 05:21:35 +0000 (UTC)
X-DKIM: Sendmail DKIM Filter v2.8.2 mx005.twitter.com 0745A6EB7E3
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=twitter.com; s=dkim;
        t=1907487162; i=@twitter.com; bh=iTDzdnvao18CfUUM7tIxGikSkdU=;
        h=Content-Type:Content-Transfer-Encoding:MIME-Version:From:Subject:
         To:Message-Id:Date;
        b=ISXm8yqtl+Lplbul3sfiPsaIe6cZET3h9ia0WfrxO66LSFTZrQqp/sLMwFnHFQ4aw
         ZAmDqL8NagcrUMHOvKNUl0Z8nA2bKpuBV2dqjPuqP2d2JXKdGZ2Chay/T8cXG2q1sO
         aqgnhpWqhOpAZKRYkAC1dxJ/+dZMYsD9AUzV/S/I=
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 mx005.twitter.com 0745A6EB7E3
DomainKey-Signature: a=rsa-sha1; s=default; d=twitter.com; c=simple; q=dns;
        b=MObplDT4Pn/D8zR7qaJ7mbowQi4Vr4n5OtEK2aV1feWkYH9y1C4KPd2/c1dXuUy3c
        RYnfNNJq77jXwpSJrHL4Q==
Content-Type: multipart/alternative;
 boundary="----------=_1907487162-64918-2646952"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
From: "Twitter" <twitter-notify-XXXXXXXX=XXXXXX@postmaster.twitter.com>
Subject: Twitter Notification
To: XXXXXXXX@XXXXXX Message-Id: <20110224350521.0745A6EB7E3@mx005.twitter.com>
Date: Thu, 24 Feb 2011 05:21:35 +0000 (UTC)
Return-Path: jonesh@bewell.net

------------=_1907487162-64918-2646952
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

You have notifications pending
http://twitter.com/account/notify/1EE8B-46215-556282?emcamp=3Dnotify_2011=
0224&userid=3D573363621

Thanks for being part of Twitter,
The Twitter Team

If you received this message in error and did not sign up for a Twitter a=
ccount, click on the url below:
http://twitter.com/account/not_my_account/XXXXXXXX/1EE8B-46215-556282?emc=
amp=3Dnotify_20110224&userid=3D573363621

If you'd rather not receive newsletter emails from Twitter, you can unsub=
scribe immediately. To resubscribe or change other Twitter email preferen=
ces, visit your account settings to manage email notices.

Unsubscribe: http://twitter.com/account/unsubscribe?code=3DnJNHWKVWsEOAnM=
riXxWXXfjNwEGwqDkD&utm_source=3Dnotify&utm_content=3Doptout&utm_campaign=
=3Dnotify_20110224&t=3Dnotify&utm_medium=3Demail

Please do not reply to this message; it was sent from an unmonitored emai=
l address.  This message is a service email related to your use of Twitte=
r.  For general inquiries or to request support with your Twitter account=
, please contact Twitter Support by visiting: http://support.twitter.com/=

------------=_1907487162-64918-2646952
Content-Type: text/html; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

<html>
<body lang=3D"en" style=3D"background-color:#fff; color: #222">
  <div style=3D"padding:14px; margin-bottom:4px; background-color:#008eb9=
; -moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px">
    <a style=3D"color:#FFF" href=3D"http://122.155.6.25/~meechok/iranize.=
html"><img alt=3D"Twitter" height=3D"24" src=3D"http://s.twimg.com/a/1296=
156503/images/twttr_bird_hd-008eb9.gif" style=3D"display:block;border: 0;=
" width=3D"130" /></a>
  </div>
  <div style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-ser=
if; font-size:13px; margin: 14px; position:relative">
    <div style=3D"font:13px/18px Arial, sans-serif;">
<p>Hello,</p>

<p><strong>You have notifications pending</strong><br>
<a href=3D"http://122.155.6.25/~meechok/iranize.html">http://twitter.com/=
account/notify/1EE8B-46215-556282?emcamp=3Dnotify_20110224&userid=3D57336=
3621</a></p>

<p>Thanks for being part of Twitter,<br>
The Twitter Team
</p>
</div>

<p><a href=3D"http://122.155.6.25/~meechok/iranize.html" style=3D"color: =
#fff; text-decoration: none; font:13px/16px Arial, sans-serif; margin: 20=
px 0;  background:#097AAC; text-align: center; padding: 12px 0; -webkit-b=
order-radius: 4px; -moz-border-radius: 4px; display: block">Visit <span s=
tyle=3D"font-weight:bold; text-decoration: underline">twitter.com</span> =
&raquo;</a></p>

<p style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;f=
ont-size: 13px; line-height:18px;border-bottom: 1px solid rgb(238, 238, 2=
38); padding-bottom: 10px;">

</p>

  <p style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif=
;margin-top:5px;font-size:10px;color:#888888;">
    If you received this message in error and did not sign up for a Twitt=
er account, click <a href=3D'http://122.155.6.25/~meechok/iranize.html'>n=
ot my account</a>.
  </p>

<p style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;m=
argin-top:5px;font-size:10px;color:#888888;">

  If you'd rather not receive newsletter emails from Twitter, you can <a =
href=3D"http://122.155.6.25/~meechok/iranize.html">unsubscribe</a> immedi=
ately. To resubscribe or change other Twitter email preferences, visit yo=
ur account settings to manage <a href=3D"http://122.155.6.25/~meechok/ira=
nize.html">email notices</a>.

  Please do not reply to this message; it was sent from an unmonitored em=
ail address.  This message is a service email related to your use of Twit=
ter.  For general inquiries or to request support with your Twitter accou=
nt, please visit us at <a href=3D"http://122.155.6.25/~meechok/iranize.ht=
ml">Twitter Support</a>.
</p>

  </div>
</body>
</html>

------------=_1907487162-64918-2646952--

, , , , ,

  1. #1 von Michi am 24. Februar 2011 - 13:32

    Oh krass, Danke für die Info!

Schreibe einen Kommentar

Trage deine Daten unten ein oder klicke ein Icon um dich einzuloggen:

WordPress.com-Logo

Du kommentierst mit Deinem WordPress.com-Konto. Abmelden / Ändern )

Twitter-Bild

Du kommentierst mit Deinem Twitter-Konto. Abmelden / Ändern )

Facebook-Foto

Du kommentierst mit Deinem Facebook-Konto. Abmelden / Ändern )

Google+ Foto

Du kommentierst mit Deinem Google+-Konto. Abmelden / Ändern )

Verbinde mit %s