Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Panda 'phishing'?
From: "Random Letters" <randomisedletters () hotmail com>
Date: Wed, 31 Mar 2004 09:10:06 +0000

To renewals () pandasoftware co uk,

As lovely as your renewal reminder (attached) looks to you, it looks hideous as a page of Microsoft Word generated HTML/XML.

It is doubly stupid for a security company to send HTML emails with deliberately misleading embedded URLs in it, i.e. the text

http://www.pandasoftware.co.uk/renew/index.htm

actually points to

https://www.secure-server-hosting.com/secutran/secureforms/sh202696/sfbuy_renewals.html

I do not have a relationship with this company and I don't know whether you do either. There are plenty of examples of 'phishing' emails being sent at the moment - is this one? http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=phishing&btnG=Google+Search

I have no reason to believe this email is a forgery but I will treat it as such unless I hear from you otherwise.

I will not be renewing my subscription and will find an alternative to your product unless I get a sensible reply from you. I have been using the product for 2 years and have been otherwise happy with it and have recommended it to colleagues, family and friends.

Yours, etc.

-----------------------------------------------
   Does HoTMaiL come with a spell checker?
-----------------------------------------------

<html xmlns:o="urn:schemas-microsoft-com:office:office"
xmlns:w="urn:schemas-microsoft-com:office:word"
xmlns:st1="urn:schemas-microsoft-com:office:smarttags"
xmlns="http://www.w3.org/TR/REC-html40";>

<head>
<meta http-equiv=Content-Type content="text/html; charset=windows-1252">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 10">
<meta name=Originator content="Microsoft Word 10">
<link rel=File-List
href="BPAT-Notification%20of%20Pending%20Service%20Expiration_files/filelist.xml">
<title> BPAT-Pending Expiration</title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="country-region"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>Julie Crosby</o:Author>
<o:LastAuthor>Panda</o:LastAuthor>
<o:Revision>2</o:Revision>
<o:TotalTime>25</o:TotalTime>
<o:Created>2004-03-23T15:40:00Z</o:Created>
<o:LastSaved>2004-03-23T15:40:00Z</o:LastSaved>
<o:Pages>1</o:Pages>
<o:Words>234</o:Words>
<o:Characters>1338</o:Characters>
<o:Company>Panda Software UK Ltd</o:Company>
<o:Bytes>42496</o:Bytes>
<o:Lines>11</o:Lines>
<o:Paragraphs>3</o:Paragraphs>
<o:CharactersWithSpaces>1569</o:CharactersWithSpaces>
<o:Version>10.2625</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if !mso]><object
classid="clsid:38481807-CA0E-42D2-BF39-B33AF135CC4D" id=ieooui></object>
<style>
st1\:*{behavior:url(#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Arial Unicode MS";
panose-1:0 0 0 0 0 0 0 0 0 0;
mso-font-charset:0;
mso-generic-font-family:roman;
mso-font-format:other;
mso-font-pitch:variable;
mso-font-signature:3 0 0 0 1 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:1627421319 -2147483648 8 0 66047 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
mso-fareast-language:EN-US;}
h1
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-pagination:widow-orphan;
mso-outline-level:1;
font-size:24.0pt;
font-family:"Arial Unicode MS";
mso-fareast-font-family:"Arial Unicode MS";
mso-bidi-font-family:"Arial Unicode MS";
mso-fareast-language:EN-US;}
p.MsoBodyText, li.MsoBodyText, div.MsoBodyText
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Arial Unicode MS";
mso-fareast-font-family:"Arial Unicode MS";
mso-bidi-font-family:"Arial Unicode MS";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
</head>

<body lang=EN-GB link=blue vlink=purple style='tab-interval:36.0pt'>

<div class=Section1>

<p class=MsoNormal align=center style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><b><span style='font-size:18.0pt;font-family:Tahoma;
color:red'>Panda Software Antivirus Update!<o:p></o:p></span></b></p>

<p class=MsoNormal align=center style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><b><span style='font-size:18.0pt;font-family:Tahoma;
color:red'><o:p>&nbsp;</o:p></span></b></p>

<h1 align=center style='text-align:center'><span style='font-size:14.0pt;
font-family:Tahoma'>Thank you for using&nbsp;<span style='color:#33CC33'>Panda Antivirus
Titanium!<o:p></o:p></span></span></h1>

<p class=MsoBodyText align=center style='margin:0cm;margin-bottom:.0001pt;
text-align:center'><b><span style='font-family:Tahoma'>Our records&nbsp;show
that&nbsp;your&nbsp;services are due to <u>expire shortly.</u> <o:p></o:p></span></b></p>

<p class=MsoBodyText align=center style='margin:0cm;margin-bottom:.0001pt;
text-align:center'><b><span style='font-family:Tahoma'>This means your
antivirus will <u>stop&nbsp;updating</u> and your computer will <u>not be
protected. </u></span></b><span style='font-size:18.0pt;font-family:Tahoma'><br>
</span><span style='font-size:14.0pt;mso-bidi-font-size:18.0pt;font-family:
Tahoma;color:red'>&nbsp;<br>
</span><strong><span style='font-family:Tahoma;color:red'>**<u>PLEASE&nbsp;IGNORE THIS NOTICE IF YOU HAVE ALREADY RENEWED YOUR SUBSCRIPTION<span class=GramE>!<span
style='text-decoration:none;text-underline:none'>*</span></span></u>*</span></strong><span
style='font-size:10.0pt;font-family:Tahoma'><o:p></o:p></span></p>

<p class=MsoBodyText align=center style='margin:0cm;margin-bottom:.0001pt;
text-align:center'><span style='font-size:14.0pt;mso-bidi-font-size:18.0pt;
font-family:Tahoma;color:red'>&nbsp;<br>
</span><span style='font-family:Tahoma'>If you <b style='mso-bidi-font-weight: normal'>renew your subscription</b> within the next <b style='mso-bidi-font-weight: normal'>ten (10) days</b>, you will automatically be <b style='mso-bidi-font-weight:
normal'><span style='color:red'>UPGRADED</span></b> <o:p></o:p></span></p>

<p class=MsoBodyText align=center style='margin:0cm;margin-bottom:.0001pt;
text-align:center'><span class=GramE><span style='font-family:Tahoma'>to</span></span><span
style='font-family:Tahoma'> the <b style='mso-bidi-font-weight:normal'><span
style='color:red'>NEW</span><span style='color:black'> </span><span
style='color:#33CC33'>Panda Titanium Antivirus 2004</span></b> at no additional
charge!<span style='mso-spacerun:yes'>  </span><o:p></o:p></span></p>

<p class=MsoNormal align=center style='text-align:center'><b style='mso-bidi-font-weight:
normal'><span style='font-family:Tahoma'><o:p>&nbsp;</o:p></span></b></p>

<p class=MsoNormal align=center style='text-align:center'><span
style='font-family:Tahoma'>The upgrade is<b style='mso-bidi-font-weight:normal'> <u><span style='color:red'>FREE</span></u><span style='color:red'>!</span></b><span
style='mso-spacerun:yes'>  </span>You only pay the cost of renewing your
subscription.<span style='mso-bidi-font-weight:bold'><o:p></o:p></span></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:Tahoma;mso-bidi-font-weight:bold'>Dear Customer:&nbsp;<o:p></o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:Tahoma'>Our records show that your Panda antivirus services <b>are
scheduled to expire shortly</b>!<o:p></o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:Tahoma'>These&nbsp;services are&nbsp;<b style='mso-bidi-font-weight:
normal'><u>essential</u></b> as they&nbsp;keep your antivirus up-to-date and
provide you with protection against current and potentially dangerous virus
infections.<o:p></o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black;mso-fareast-language:ES'>For more
information, please contact your supplier or&nbsp;visit&nbsp;our
website&nbsp;at&nbsp;<b style='mso-bidi-font-weight:normal'><a
href="https://www.secure-server-hosting.com/secutran/secureforms/sh202696/sfbuy_renewals.html";><span
lang=EN-US style='color:windowtext;mso-ansi-language:EN-US;mso-fareast-language:
EN-US;text-decoration:none;text-underline:none'><span style='mso-field-code:
"HYPERLINK \0022http\:\/\/www\.pandasoftware\.co\.uk\/renew\/index\.htm\0022"'><u><span
style='color:blue'>http://www.pandasoftware.co.uk/renew/index.htm</span></u></span></span></a></b>&nbsp;to
renew your </span><b><span style='font-family:Tahoma;color:#00CC00;mso-fareast-language:
ES'>Panda Antivirus Titanium</span></b><span style='font-family:Tahoma;
color:black;mso-fareast-language:ES'> services quickly and
easily.&nbsp;&nbsp;&nbsp;<o:p></o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black;mso-fareast-language:ES'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black;mso-fareast-language:ES'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black;mso-fareast-language:ES'>Regards,<o:p></o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black'><a
href="https://www.secure-server-hosting.com/secutran/secureforms/sh202696/sfbuy_renewals.html";
target="_self"></a><o:p></o:p></span></p>

<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-family:Tahoma;color:black;mso-bidi-font-weight:bold'>Renewals
Department</span><span lang=EN-US style='font-family:Tahoma;color:black;
mso-ansi-language:EN-US;mso-fareast-language:ES;mso-bidi-font-weight:bold'><br>
Panda Software (</span><st1:country-region><st1:place><span lang=EN-US
style='font-family:Tahoma;color:black;mso-ansi-language:EN-US;mso-fareast-language:
ES;mso-bidi-font-weight:bold'>UK</span></st1:place></st1:country-region><span
lang=EN-US style='font-family:Tahoma;color:black;mso-ansi-language:EN-US;
mso-fareast-language:ES;mso-bidi-font-weight:bold'>)<br style='mso-special-character:
line-break'>
<![if !supportLineBreakNewLine]><br style='mso-special-character:line-break'> <![endif]></span><span style='font-family:Tahoma;color:black'><o:p></o:p></span></p>

<p class=MsoNormal align=center style='mso-margin-top-alt:auto;mso-margin-bottom-alt: auto;text-align:center'><strong><span style='font-size:10.0pt;mso-bidi-font-size:
12.0pt;font-family:Tahoma;color:black'>Panda Software makes every effort to
ensure that our customers' information is correct.&nbsp; If you are no longer using the software please contact: </span></strong><span style='font-size:10.0pt;
mso-bidi-font-size:12.0pt;font-family:Tahoma;color:black'><a
href="mailto:renewals () pandasoftware co uk"><b><span style='color:black'>renewals () pandasoftware co uk</span></b></a></span><span
style='font-family:Tahoma;color:black'><o:p></o:p></span></p>

<p class=MsoNormal><span style='font-family:Tahoma'><o:p>&nbsp;</o:p></span></p>

</div>

</body>

</html>

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! http://www.msn.co.uk/messenger

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault