Eine Twitter Phishing eMail ist unterwegs
Per eMail hatte ich heute eine Info über eine ausstehende Nachricht auf Twitter in meinem Posteingang. Irritiert hatte mich die Tatsache, dass die Info über eine email-Adresse kam, die mit keinem Twitter-Konto verbunden ist. Ein Grund für mich, hier einmal genauer hin zu schauen.
Ein ganz klar vorne weg, Twitter verschickt keine Infos über ausstehende Nachrichten!
Die Info ist gut gemacht, allerdings ohne jegliche Twitter Logos und ohne die übliche persönliche Anrede. Statt dessen nur einen Link zu der angeblichen Nachricht.
Warnung: Alle Links in dieser eMail führen auf folgende Weiterleitungs-Adresse: http://122.155.6.25/~meechok/iranize.html
Wer sich für den Quellcode interessiert, den habe ich hier mit eingefügt.
Quellcode der eMail:
X-Account-Key: account6 X-UIDL: 0LpBSP-1QUnfs3OU8-00fNQM X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Received: from [212.85.97.169] (helo=v000423.home.net.pl) by mx35.web.de with smtp (WEB.DE 4.110 #2) id 1PsSiD-00039X-00 for XXXXXX@XXXXXX; Thu, 24 Feb 2011 05:21:57 +0100 Received: by mx005.twitter.com (Postfix, from userid 1853) id 0745A6EB7E3; Thu, 24 Feb 2011 05:21:35 +0000 (UTC) X-DKIM: Sendmail DKIM Filter v2.8.2 mx005.twitter.com 0745A6EB7E3 DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=twitter.com; s=dkim; t=1907487162; [email protected]; bh=iTDzdnvao18CfUUM7tIxGikSkdU=; h=Content-Type:Content-Transfer-Encoding:MIME-Version:From:Subject: To:Message-Id:Date; b=ISXm8yqtl+Lplbul3sfiPsaIe6cZET3h9ia0WfrxO66LSFTZrQqp/sLMwFnHFQ4aw ZAmDqL8NagcrUMHOvKNUl0Z8nA2bKpuBV2dqjPuqP2d2JXKdGZ2Chay/T8cXG2q1sO aqgnhpWqhOpAZKRYkAC1dxJ/+dZMYsD9AUzV/S/I= X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 mx005.twitter.com 0745A6EB7E3 DomainKey-Signature: a=rsa-sha1; s=default; d=twitter.com; c=simple; q=dns; b=MObplDT4Pn/D8zR7qaJ7mbowQi4Vr4n5OtEK2aV1feWkYH9y1C4KPd2/c1dXuUy3c RYnfNNJq77jXwpSJrHL4Q== Content-Type: multipart/alternative; boundary="----------=_1907487162-64918-2646952" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: "Twitter" Subject: Twitter Notification To: XXXXXXXX@XXXXXX Message-Id: <[email protected]> Date: Thu, 24 Feb 2011 05:21:35 +0000 (UTC) Return-Path: [email protected] ------------=_1907487162-64918-2646952 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, You have notifications pending http://twitter.com/account/notify/1EE8B-46215-556282?emcamp=3Dnotify_2011= 0224&userid=3D573363621 Thanks for being part of Twitter, The Twitter Team If you received this message in error and did not sign up for a Twitter a= ccount, click on the url below: http://twitter.com/account/not_my_account/XXXXXXXX/1EE8B-46215-556282?emc= amp=3Dnotify_20110224&userid=3D573363621 If you'd rather not receive newsletter emails from Twitter, you can unsub= scribe immediately. To resubscribe or change other Twitter email preferen= ces, visit your account settings to manage email notices. Unsubscribe: http://twitter.com/account/unsubscribe?code=3DnJNHWKVWsEOAnM= riXxWXXfjNwEGwqDkD&utm_source=3Dnotify&utm_content=3Doptout&utm_campaign= =3Dnotify_20110224&t=3Dnotify&utm_medium=3Demail Please do not reply to this message; it was sent from an unmonitored emai= l address. This message is a service email related to your use of Twitte= r. For general inquiries or to request support with your Twitter account= , please contact Twitter Support by visiting: http://support.twitter.com/= ------------=_1907487162-64918-2646952 Content-Type: text/html; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable <html> <body lang=3D"en" style=3D"background-color:#fff; color: #222"> <div style=3D"padding:14px; margin-bottom:4px; background-color:#008eb9= ; -moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px"> <a style=3D"color:#FFF" href=3D"http://122.155.6.25/~meechok/iranize.= html"><img alt=3D"Twitter" height=3D"24" src=3D"http://s.twimg.com/a/1296= 156503/images/twttr_bird_hd-008eb9.gif" style=3D"display:block;border: 0;= " width=3D"130" /></a> </div> <div style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-ser= if; font-size:13px; margin: 14px; position:relative"> <div style=3D"font:13px/18px Arial, sans-serif;">
Hello,
You have notifications pending
http://twitter.com/= account/notify/1EE8B-46215-556282?emcamp=3Dnotify_20110224&userid=3D57336= 3621Thanks for being part of Twitter,
The Twitter Team
»If you received this message in error and did not sign up for a Twitt= er account, click n= ot my account.
If you'd rather not receive newsletter emails from Twitter, you can unsubscribe immedi= ately. To resubscribe or change other Twitter email preferences, visit yo= ur account settings to manage email notices. Please do not reply to this message; it was sent from an unmonitored em= ail address. This message is a service email related to your use of Twit= ter. For general inquiries or to request support with your Twitter accou= nt, please visit us at Twitter Support.
------------=_1907487162-64918-2646952--