[LINK] Fwd: Tsunami Danger - Spoof
rick at praxis.com.au
Fri Dec 3 16:46:08 EST 2004
Grant Malcolm wrote:
> Hi Linda
> On Fri, 3 Dec 2004, Linda Rouse wrote:
>>Have any other Linkers received the Tsunami Warning alert enclosed
>>below (no attachment and the html isn't too bad ) ?
> The site installs a trojan if you're running unpatched Internet Explorer.
I've checked out a few of the dangerour hosts, including
and they take forever to download.
Might I conclude the scam is working quite well? It appears the sites
are being slahsdotted as I write this, which doesn't augur too well
for those viewing the site with MS IE :(
BTW: one of the sites (http://waveplanet.org/) has had its home
page removed, possibly as a first line of defense againsst this attack.
Which is quite interesting since it reveals the contents of the
underlying directory. One very interesting log file looks like
it records the details of all the victims who have fallen prey to
Sample from http://waveplanet.org/iplog.txt ....`
Could those be ip addresses in there? Ohmadgawd!
Rick Welykochy || Praxis Services
Small numbers of extremists, who have executed a single successful project
on American soil, have encouraged American society to eat itself.
-- Roger Clarke
More information about the Link