Sunday, July 17, 2005

Boris Mizhen is phishing for trouble.

Received this in my in-box -
From: "FEDERAL CREDIT UNION"
Subject: Fcu Important Info
Date: Sat, 16 Jul 2005 13:11:28 -0700


Dear FCU holder account,

As part of our security measures, we regularly screen activity in Federal Credit Unions (FCU) network.
We recently noticed the following issue on your account: A recent review of your account determined that we require some additional information from you in order to provide you with secure service. Case ID Number: PP-065-617-349 For your protection, we have limited access to your account until additional security measures can be completed. We apologize for any inconvenience this may cause. Please log in to your FCU account to restore your access as soon as possible.

You must click the link below and fill in the form on the following page to complete the verification process.


Click here to update your account.


Of course the link carried the user to:"http://62.193.218.82/.../update_card.htm

Network Solutions says this address is registered to RIPE Network Coordination Centre. According to the The Registry of Known Spam Operators, Boris Mizhen is behind RIPE Network Coordination Centre.

Take care Mr. Mizhen. When you attempt to scam the customers of a Federal Credit Union the chance of crossing someone with the police powers to go after you are good to excellent.

Edit-

Results from the RIPE Network who is search

1 comment:

Keith Reid said...

Just so you know, the RIPE network coord is the regional network authority for all of europe and asia. Network Solutions points you to RIPE because NetSol does not own registration information for the Asian or European region.

So unless you think the head of the European/Asian network coordination center for internet numbers and names is behind this particular scam, you'll need to look a little further...

If you go to http://www.ripe.net/whois you can enter the IP address and find out who the actual registrant is for that address:

Here's some of that information:
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
e-mail: abuse@amen.fr

It's a large ISP in france. They're nice enough to provide a phone number as well as an email address for [gasp] abuse reports!

Good luck.