[Dshield] FW: Visa Security Update

Paul Marsh pmarsh at nmefdn.org
Thu Mar 11 14:37:59 GMT 2004


I got the same thing this morning, the continue button control pointed
me to http://www.demopeople.com .  I forwarded the email off to
AskVisaUSA at Visa.com as per requested on visa's site.

Thanx, Paul

> -----Original Message-----
> From: Louis Hablas [mailto:Lou.Hablas at rzim.org] 
> Sent: Thursday, March 11, 2004 09:00 AM
> To: Dshield (E-mail)
> Subject: [Dshield] FW: Visa Security Update
> 
> All:
>  
> Received the following note.  It's definitely a phishing 
> scam.  I didn't click on the 'Continue' button, but somebody 
> on list may want to explore more fully.  Header info. shows 
> the following--looks like an open proxy
> (64.166.210.148) from pacbell's world.  I've forwarded info. 
> to abuse at same <mailto:abuse at same> .
>  
> Lou
>  
>  
> Header Info:
>  
>  
> Received: from 64.166.210.148 
> (adsl-64-166-210-148.dsl.lsan03.pacbell.net
> [64.166.210.148]) by ATL0NTS-EXCH.rzim.org with SMTP 
> (Microsoft Exchange Internet Mail Service Version 
> 5.5.2657.72)  id G4DBM946; Wed, 10 Mar 2004 23:52:08 -0500
> Date: Wed, 10 Mar 2004 20:53:42 -0800
> From: Visa Service <  <mailto:security at visa-security.com>
> security at visa-security.com>
> X-Mailer: Microsoft Outlook Express 6.00.2800.1158
> Reply-To: Visa Service <  <mailto:security at visa-security.com>
> security at visa-security.com>
> Organization: Visa International Service
> X-Priority: 3 (Normal)
> To: <email address>Subject: Visa Security Update
> Mime-Version: 1.0
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
>  
>  
> -----Original Message-----
> From: Visa Service [mailto:security at visa-security.com]
> Sent: Wednesday, March 10, 2004 11:54 PM
> To: <email address>
> Subject: Visa Security Update
> 
> 
> 
> 
> 
> Dear Sir/Madam,
> 
> 
> 
> 
> We were informed that your card is used by another person or 
> stolen. It
> could happen if you have been shopping on-line, and someone got your
> "Billing information" including your card number. To avoid 
> and prevent any
> billing mistakes and to refund your credit card, it is 
> strongly recommended
> to proceed filling in the secure form on our site and 
> applying for our Zero
> Liability program. This program is free and it will help us 
> to investigate
> this accident.
> 
> 
> 
> 
> 
> 
> 
> Sincerely yours, Visa Support Assistant, Alwin Desagun.
> 
> 
> 
> 
> The information contained in this message may be CONFIDENTIAL 
> and is for the
> intended addressee only.  Any unauthorized use, dissemination of the
> information, or copying of this message is prohibited.  If 
> you are not the
> intended addressee, please notify the sender immediately and 
> delete this
> message.
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 




More information about the list mailing list