Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: Mageant on January 03, 2012, 08:54:12 PM



Title: Phishing Emails Targeting Mt. Gox Users
Post by: Mageant on January 03, 2012, 08:54:12 PM
I received an email today that probably was specifically targeted towards Mt. Gox users.
I'm not sure how they knew that I use Mt. Gox, but possibly they simply target everybody.

Here is the email (I removed the parts specific to my email):

Code:
Subject: [Mt.Gox] Your account is currently pending review.
From:info@mtgox.com
Reply-To:info@mtgox.com
MIME-Version:1.0
Content-Type: text/html;
Message-Id: <E1Ri1qh-001EPr-Nz@de1.imhoster.net>
Date: Tue, 03 Jan 2012 12:44:07 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Originator/Caller UID/GID - [1113 1109] / [47 12]
X-AntiAbuse: Sender Address Domain - de1.imhoster.net

<HTML>Dear Mt.Gox user,<br>
<br>
Your account is currently pending review, please visit <a href='http://www.mtgqx.tk/forms/verification'>https://mtgox.com/forms/verification</a><br>
For those users who have had their accounts marked for review, an explanation of why were are implementing these security measures can be found here:<br>
<br>
<a href='http://www.mtgqx.tk/entries/20471711-security-measures-explained'>Security Measures Explained</a><br>
<br>
�Verified� Accounts are eligible for monthly/daily transaction limits of up to 5 times the monthly limit and 10 times the daily limit.<br>
<br>
In order to apply for the �Verified� account status please attach a copy of the following documents:<br>
- Your government issued photo ID (passport, permanent residence card or driver�s license) and<br>
- A scan of either your monthly utility bill (power, phone, TV, gas, water, etc.) or a certificate of residency issued by your local government.<br>
<br>
Thanks, <br>
The Mt.Gox team
</HTML>

Notice that the domain is actually www.mtgqx.tk


Title: Re: Phishing Emails Targeting Mt. Gox Users
Post by: barbarousrelic on January 03, 2012, 08:59:43 PM
You aren't cool unless you are on the mtgox spam email list.


Title: Re: Phishing Emails Targeting Mt. Gox Users
Post by: nmat on January 03, 2012, 09:00:27 PM
Notice that the domain is actually www.mtgqx.tk

It no longer works


Title: Re: Phishing Emails Targeting Mt. Gox Users
Post by: phatsphere on January 03, 2012, 09:25:38 PM
i got the same, except that it was relayed via some freemail.ru service.

i suggest everyone to report such url's here:
http://www.google.com/safebrowsing/report_phish/