本帖最后由 反腐剂 于 2011-9-23 19:41 编辑
Dear Lingqidian Team
It appears that your website http://lingqidian.org has been hacked by a fraudster. It is now hosting a phishing attack against Chase.
Please remove the fraudulent folders/files as soon as possible and secure your website as it has been compromised.
Please note that it is possible that the fraudulent content is embedded in your website's legitimate files.
http://lingqidian.org/data/Logon ... pageLabel=page_log/
In addition, please send us any source files of the attack.
Please let us know if you have any questions or need further assistance. We appreciate your cooperation.
Best Regards,
RSA Anti-Fraud Command Center
RSA, The Security Division of EMC
US Phone: +1-866-408-7525
Email: afcc@rsa.com
For more information about RSA's AFCC
http://www.rsa.com/node.aspx?id=3348
Dear Sirs:
RSA , an anti-fraud and security company, is under contract to assist JPMorgan Chase and its related entities in preventing or terminating online activity that targets JPMorgan Chase’s Bank clients as potential fraud victims. RSA has been made aware that you appear to be providing Internet Services to a fraudulent Web site, which is part of a “phishing scam”*. This activity violates JPMorgan Chase’s Bank copyright, trademark and other intellectual property rights and may violate the criminal laws of the United States and other nations.
E-mail messages have been broadly distributed to individuals by a person or entity pretending to be JPMorgan Chase. These e-mails use JPMorgan Chase’s Bank name and identity (including trademarks) without authorization. The e-mails request recipients to verify and submit sensitive details related to their JPMorgan Chase accounts. Within the fraudulent e-mail message, there is a link that leads the recipients to a fraudulent website displaying JPMorgan Chase’s Bank copyrighted materials and trademarks. The fraudulent website is located at the following URL address http://lingqidian.org/data/Logon ... pageLabel=page_log/ to which you provide services and which is under your control.
The fraudulent website not only represents a misuse of JPMorgan Chase’s Bank intellectual property; its purpose is to improperly obtain personal information of JPMorgan Chase customers in order to fraudulently access their bank accounts. The owners of those websites typically perpetrate identity-theft related activities, such as using customer’s credit cards or bank accounts without authorization. In addition, since the vast majority of all of the e-mails are not being sent to actual JPMorgan Chase customers, the actions may serve to damage the reputation and image of JPMorgan Chase.
Please take all necessary steps to immediately shut down the fraudulent website, terminate its availability to the Internet and discontinue the transmission of any e-mails associated with this website.
We understand that you may not be aware of this improper use of your services and we appreciate your cooperation. We specifically would ask that you also take the following actions:
Please provide us with a tar/zip file of the source code for this site, so that we may analyze it to help prevent further attacks.
If any customer data has been captured that is stored on your systems or equipment, please send us that data so that the customers to whom that data relates can be notified and take steps to protect their credit.
Please provide a copy of any records you maintain that indicate the name, contact information, method of payment or similar information that may be useful in helping learn about the identity and location of the customer for whom the website has been operated.
Thank you for your cooperation to prevent and terminate this fraudulent activity.
谷歌翻译一下吧，DS的vps这么强悍 |
发表于 2011-9-23 19:14:10