LinkedIn Phishing

Monday, August 16, 2010 

I got a strange phishing message that pretended to be from LinkedIn.  Not too bad as a facsimilie.  Fortunately
the target domain (http://www.anhrejws.info/) is already shutdown (suspended for “spam abuse”)

Name Server:NS1.SUSPENDED-FOR.SPAM-AND-ABUSE.COM

It appeared to be registered to a legit business and possibly a real name and email address, though unrelated to the LinkedIn request. Kind of a clever trick, but it probably would have lasted longer with CN registration, and perhaps if every link on the page didn’t point to the same destination.

moz-screenshot-62.png
Posted at 11:57:02 UTC

Leave a Reply