04 January 2005

XML reader alert -- Phishing for your Tsunami Aid

Bank accounts. They're not just related to Nigeria. Ref

They're also going after those who are inclined to give in the wake of the Tsunami. Other Alerts.

Michelle Malkin mentions the Tsunami spam here.Other reports.

  • Web hunter: Protecting XML information in the wake of the Tsunami


    Mud's Tests Phish Hunt Report

    This is as far as I was able to take it. Perhaps someone else might
    be able to pinpoint who is phishing with these bogus aid requests.

    Ref Ref Ref Interesting that Google has a far larger number of hits.

    The street name has appeared in the news.

    Ref Ref Another variation. More details.

    Similar name as a homepage in Netherlands. Strange, no homepage but they've got an e-mail listed.

    This is a time when it would be nice to have an exact-text-search capability. Meaning: Don't strip out the /-signs.

    Nothing in China.

    Am seeing the term in Italy. The problem the name has is using the Netherlands connection, when the name is actually a derivation of Italian, "Anullamento" is Italian for "cancellation," suggesting someone has "tourism" and "travel packages" on their mind. Daniel McNamara have you seen this in your phishing-research? Ref Ref Ref Ref RefRef

    Which language set do they make this error of removing the pre-fix on the assumption it is just a filler? It could be anyone.

    It is interesting that they would choose a "unique name" that is not entirely new, but a derivation of a real world. Why not make up an entirely new spelling with a different name?


    Update: Ref
  • Bank accounts. They're not just related to Nigeria. Ref

    They're also going after those who are inclined to give in the wake of the Tsunami. Other Alerts.

    Michelle Malkin mentions the Tsunami spam here.Other reports.

  • Web hunter: Protecting XML information in the wake of the Tsunami


    Mud's Tests Phish Hunt Report

    This is as far as I was able to take it. Perhaps someone else might
    be able to pinpoint who is phishing with these bogus aid requests.

    Ref Ref Ref Interesting that Google has a far larger number of hits.

    The street name has appeared in the news.

    Ref Ref Another variation. More details.

    Similar name as a homepage in Netherlands. Strange, no homepage but they've got an e-mail listed.

    This is a time when it would be nice to have an exact-text-search capability. Meaning: Don't strip out the /-signs.

    Nothing in China.

    Am seeing the term in Italy. The problem the name has is using the Netherlands connection, when the name is actually a derivation of Italian, "Anullamento" is Italian for "cancellation," suggesting someone has "tourism" and "travel packages" on their mind. Daniel McNamara have you seen this in your phishing-research? Ref Ref Ref Ref RefRef

    Which language set do they make this error of removing the pre-fix on the assumption it is just a filler? It could be anyone.

    It is interesting that they would choose a "unique name" that is not entirely new, but a derivation of a real world. Why not make up an entirely new spelling with a different name?


    Update: Ref
    " />