[Dshield] Anyone know anything about this?

Tom dshield at oitc.com
Mon Mar 6 17:01:13 GMT 2006


We received this today. Is this really bad guys or are the bad guys 
jojob'ing these sites? Its hard for me to tell are they are all 
russian sites.

Tom

>Return-Path: <noreply-42 at ww-ak.web-hack.ru>
>Received: from DHDQHL51 (24.178.117.159) by x with SMTP (Eudora
>  Internet Mail Server X 3.2.8) for <x>;
>  Mon, 6 Mar 2006 09:32:02 -0500
>Message-ID: <x at DHDQHL51>
>From: <noreply-42 at ww-ak.web-hack.ru>
>To: <x>
>Subject: Internet hackers crew webhack - www.web-hack.ru     Ref: #
>Date: Mon, 06 Mar 2006  06:31:55 -0700
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>	boundary="----=_NextPart_000_000E_01C640E7.A9B740A0"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>
><x-html><!x-stuff-for-pete base="" src="" id="0" 
>charset="iso-8859-1/macintosh"><!DOCTYPE HTML PUBLIC "-//W3C//DTD 
>HTML 4.0 Transitional//EN">
><HTML><HEAD>
><META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
><META content="MSHTML 6.00.2900.2722" name=GENERATOR>
></HEAD>
><BODY>
>Dear Sir/Madam,
>
>Hello! We are internet hackers crew - Web-hack.
>We propose you for sale some interesting things:
>  - private exploits - http://forum.web-hack.ru
>  - stolen credit cards and bank accounts - http://forum.web-hack.ru
>  - we infect users pc's with your trojan for low prices (10000 
>infected pc's for 25$) - http://forum.web-hack.ru
>  - bulletproof domains and hosting - http://forum.web-hack.ru
>
>Best offer - bulletproof domain + hosting 0 usd/week. You can use
>this hosting for any scam/fraud and nobody will close it!
>For more information look at - http://forum.web-hack.ru
>
>P.S. We are registering bulletproof domains on our partner site 
>http://www.r01.ru/ there we have "our" people
>to guarantee stability of our domains and hosting so any 
>organization like spamhaus.org cannot down our hosting
>and domains.
>
>We are now spaming 5 000 000 people look out the domain is alive as 
>always and never gonna be down !!
>
>Please go and order our services at: http://forum.web-hack.ru
>
>Msg-ID:  #
></BODY>
></HTML>
>
></x-html>


-- 

Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/
US Phone Numbers: 321-984-3714, 321-729-6258(fax), 
321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw at mac.com
Google Talk: trshaw at gmail.com
skype: trshaw


More information about the list mailing list