Здравствуйте. На ваш сайт поступила жалоба на фишинговые страницы On ** Feb **:**, [email protected] wrote: [PL-*******] Phishing attack(s) hosted on: webdoff.ru Formular-Daten =============================================== Name: Scott Roman E-Mail: [email protected] Sprache: de Datenweitergabe: BEWILLIGT =============================================== Abuse-Daten =============================================== Quelle: **.***.*.** Kategorie: Phising Beschreibung: ------------------------------------ [PL-*******] Phishing attack(s) hosted on: webdoff.ru During an investigation of fraud, we discovered a compromised website (webdoff.ru) that is being used to attack our client and their customers. In addition to the website owner, we have addressed this report to the responsible authoritative providers who have the ability to disable the malicious content in question. Based on your relationship to the content in question, please see our specific request below. This threat has been active for at least *.* hours. ***confirmxxx.php ***letitcome.php ***upupmoney.php ***wells-fargoonline.php *** First detection of malicious activity: **-**-**** **:**:** UTC Most recent observation of malicious activity: **-**-**** **:**:** UTC Associated IP Addresses: **.***.*.** === HOSTING PROVIDER === If you agree that this is malicious, we kindly request that you take steps to have the content removed as soon as possible. It is highly likely that the intruder who set up this phishing content has also left additional fraudulent material on this server such as illegitimate access points. === WEBSITE OWNER === We recommend taking the following actions to secure the web site and prevent the attackers from returning: - Update your web applications including CMS, blog, ecommerce, and other applications (and all add-on **plugins). - Search all of your web directories for suspicious files as attackers commonly leave backdoors. - Scan the computer from which you login to your web hosting control panel or ftp server with anti-virus software. - Change your web hosting provider if this is an ongoing issue. If your provider has disabled your account because of this incident, you must coordinate a resolution with them directly as PhishLabs has no control over this aspect. If we have contacted you in error, or if there is a better way for us to report this incident, please let us know so that we may continue our investigation. We are grateful for your assistance. Kind regards, Scott Roman PhishLabs Security Operations *********** Available **/* [PL-*******] ------------------------------------ Log(-auszge): ------------------------------------ ***confirmxxx.php ***letitcome.php ***upupmoney.php ***wells-fargoonline.php *** ------------------------------------ Эти страницы вы размещали? |