Bigpond phish

This email is NOT from Bigpond.

image

Interestingly it seems to have been sent to the @bigpond.com email recipient using a compromised @bigpond.com user account.

image

The source IP address, 180.215.155.152, is in India.

image

If you reply to the email, your email actually goes to webaccountdept@w.cn:

image

w.cn is registered to Xiamen Yi Network Technology Co., Ltd.

The email that I received is dated 22 February 2012; as at 4 March 2012 they were still being seen.

The same reply to address is also being used for a Lottery Scam email.

Published Mon, Mar 26 2012 11:33 by sandi