OpenOffice is used in trickery

Started by Frands, October 15, 2008, 08:04:40 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Frands

Hi  :)

FYI:


The free and popular office suite 'Open Office' is used in connection with a corruption trial in which ordinary users have to pay money for a fictitious membership.

The invitation is spammed out to arbitrary recipients and arrives with the following contents:

      
    Open Office Suite 2009
    Open, Create & Edit Your Files
    Download Office Suite 2009??Here
    Edit Word, Excel & Power Point files- 100% MS Office Compatible.

    Office Solutions

    Read and write PDF files just like Adobe.
    Here's how to download Open Office 2009:
    1. Go to: Download Page
    2. Download Open Office 2009
    3. Receive access immediately
    This software package is the best way to edit your documents.
    Publish all of your documents online in the HTML format.
    Thank you for choosing us, the worldwide leader in Open Office 2009.
    For More Information Visit our Website
    Thank You,

    David Matthews
    If you want to stop receiving mail, please go to:
    http://dai ly new-product.org/
    or you may contact us at the following address:

    Plaza Neptuno, local #7
    Via ricardo J Alfaro, Tumba Muerto
    Panama Ciudad
    Republica de Panama

The link enclosed  enclosed by an underlying HREF against an IP address.

The website you are directed to, is a falsification of the Open Office Suite 2009 Website. If the user can be enticed to click the "Download Now" icon, so he lands on a payment gateway, which is trying to fish credit card information from the user, having charged for a membership. The money for membership then channeled to the person behind this scam.

The website tries to entice users to abandon the following information:

    * Name
    * Surname
    * Location
    * PostalCode
    * E-Mail
    * Cc Number
    * CcV2
    * Scad

It is  interesting that the Web page, which you are directed to is a legitimate payment gateway under signupsecurity.com, which is equipped with
a valid certificate issued by GoDaddy.

Same payment gateway was  used in a similar scam in March, where the bait was the iTunes Store. There was also a fake website and use of signupsecurity.com 's payment gateway.

As always, it is  recommended that you show skepticism and common sense when you buy goods online. This is a real trick and probably not the last, we have seen to that.



      
The fake site: 
Our greatest glory is not in never falling but in rising every time we fall.
- Confucius
-----
Trend Micro Internet Security


Home Forums:
https://www.landzdown.com/
http://securitygarden.blogspot.dk/
https://www.classicrockforums.com/