I believe that MtGox is also sending spam emails telling people to download a new bitcoin client. I think it's the wallet stealer trojan.
Delivered-To: email omitted
Received: by 10.204.49.86 with SMTP id u22cs24157bkf;
Sun, 19 Jun 2011 17:17:59 -0700 (PDT)
Received: by 10.213.20.83 with SMTP id e19mr852798ebb.120.1308529078964;
Sun, 19 Jun 2011 17:17:58 -0700 (PDT)
Return-Path: <
freexbox@panda.fwserv.info>
Received: from panda.fwserv.info (ns1.fwserv.info [78.46.30.35])
by mx.google.com with ESMTPS id u13si11606915eem.102.2011.06.19.17.17.58
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 19 Jun 2011 17:17:58 -0700 (PDT)
Received-SPF: pass (google.com: domain of
freexbox@panda.fwserv.info designates 78.46.30.35 as permitted sender) client-ip=78.46.30.35;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
freexbox@panda.fwserv.info designates 78.46.30.35 as permitted sender) smtp.mail=freexbox@panda.fwserv.info
Received: from freexbox by panda.fwserv.info with local (Exim 4.69)
(envelope-from <
freexbox@panda.fwserv.info>)
id 1QYSBb-0007PI-Jn
for myemail@gmail.com; Mon, 20 Jun 2011 00:17:51 +0000
To:
myemail@gmail.comSubject: [Mt.Gox] Bitcoin Generating Program
From:
noreply@mtgox.com <
noreply@mtgox.com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <
E1QYSBb-0007PI-Jn@panda.fwserv.info>
Date: Mon, 20 Jun 2011 00:17:51 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - panda.fwserv.info
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [979 975] / [47 12]
X-AntiAbuse: Sender Address Domain - panda.fwserv.info
Dear Mt.Gox user,
There has recently been a private new Bitcoin exploit program released that duplicates transaction fee's from the previous thousands of transactions and sends the BTC to your address.
We're well aware that many Mt. Gox users have lost their Bitcoins due to the security breaches on our website in the last few days, so we decided it would be fair for those users to recoup at least some of their losses:
You may check out the exploit here : linkremoved//Bitcoin-Exploit.rar
**Please read the enclosed tutorials prior to running the program for instructions.**
This is our way of apologizing to our users for the massive problems we've been experiencing as of late, including the users who have lost alot of BTC over the past few days
Thanks,
The Mt.Gox team