Forum Moderators: buckworks & webwork

Message Too Old, No Replies

Heads Up: NetworkSolutions Inc Phishing emails

Copycat scammers inspired by the recent eNom named scam...

         

conor

9:55 pm on Oct 29, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Just received an email proporting to be from NetworkSolutions Inc stating that even though they had informed me that my domains were about to expire I had not renewd - but should take this opportunity

"to receive a percentage of the net proceeds that were generated from the renewal and transfer of the domain name "

enducing me to

"click on the following link, enter your domain name, and confirm your contact information in order to claim these fun"

On a networksolution.com.scam00.asia style domain

Is this a new standard of phishing ? - Domain names are more valuable than egold or paypal accounts...

Funny thing is I haven't had a domain registered with NS for over 10 Years

There are going to be even more copycats so beware

Receptional Andy

10:16 pm on Oct 29, 2008 (gmt 0)



I believe this is actually sent by the same crew - seemingly with a list of registrars to target. It has all the same hallmarks, and very similar subjects, messages and destinations.

The emails sent seem to be originating from spambot software called Cutwail - installed as a trojan on thousands of end-user's PCs. The software itself is pretty advanced - reportedly it is capable of such tricks as automatically creating hotmail accounts and bypassing their captcha system.

It's no surprise that the phishing targets themselves seem to be adapting.

shman

4:46 pm on Oct 31, 2008 (gmt 0)

10+ Year Member



I responded on the other thread on this subject here and wanted to just say that we are warning customers to be careful and to change their acct info if they even think they may have clicked on a spooofed link.Its on the Network Solutions home page and the blog
Andy,

We took the advice of the community and are sending text emails to customers to warn them of the phishing scam.

Shashi Bellamkonda
Social Media Swami ¦ Network Solutions

GaryK

7:18 pm on Oct 31, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks for the heads-up. I've been flooded with these over the past three days. I've been forwarding them to abuse@networksolutions.com and always get a reply back stating they're working with the registrars of the domains doing the phishing and asking me to continue forwarding the phishing e-mails to them. This morning I got another e-mail telling me all the domains doing the phishing have been shut-down. For me it was easy to spot these attacks cause the idiots didn't even use the e-mail address I use for domain management. That and the link was clearly not to NetSol.