<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
<channel>
<title><![CDATA[C.I.S.R.T.]]></title> 
<link>http://www.cisrt.org/enblog/index.php</link> 
<description><![CDATA[Chinese Internet Security Response Team (GMT +0800)]]></description> 
<language>en-US</language> 
<copyright><![CDATA[C.I.S.R.T.]]></copyright>
<item>
<link>http://www.cisrt.org/enblog/read.php?223</link>
<title><![CDATA[Three Phishing Sites about Chinese Bank]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Thu, 17 Jan 2008 05:39:57 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?223</guid> 
<description>
<![CDATA[ 
	<strong>Bank of China</strong> (Hongkong) gave an <a href="http://www.bochk.com/web/about/press_release/press_release_details.xml?section=about&amp;level_2=press_release&amp;fldr_id=30526&amp;selFldr=30526&amp;pfid=84&amp;cid=41005&amp;lang=en" target="_blank"><u>alert</u></a> about a phishing site (<strong>boctelex.cn</strong>) on Jan.10.<br/><br/>We investigated this phishing site. It is hosted in the United States. As while, we found another two phishing sites hosted on the same IP. One masquerades as <strong>CMB Bank</strong>, the other masquerades as <strong>ICBC Bank</strong>. <br/><br/>The foreign friends in China should be careful of the following phishing sites:<br/><div class="code">boctelex.cn<br/>cm-bk.com<br/>icbcbk.com</div><br/><br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=boctelex.cn" rel="tag">boctelex.cn</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=cm-bk.com" rel="tag">cm-bk.com</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=icbcbk.com" rel="tag">icbcbk.com</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=boc" rel="tag">boc</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=cmb" rel="tag">cmb</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=icbc" rel="tag">icbc</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?113</link>
<title><![CDATA[A Special Phishing mail from Ebay]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Fri, 15 Jun 2007 10:17:25 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?113</guid> 
<description>
<![CDATA[ 
	We received a special phishing mail from Ebay today. Besides the usual ways of phishing, a malicious link was inserted into the phishing mail. If someone opens this mail, this malicious link will be opened. <br/><br/>The spams are as the following: <br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=ebay" rel="tag">ebay</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=mmy88.cn" rel="tag">mmy88.cn</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?105</link>
<title><![CDATA[Phishing spams from GrupoSantander.es]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Wed, 30 May 2007 10:11:25 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?105</guid> 
<description>
<![CDATA[ 
	We received some phishing spams about <strong>GrupoSantander.es</strong> today. <strong>GrupoSantander.es</strong> is a famous Spanish Bank. Spanish users should be careful of these phishing spams.<br/><br/>The screenshot of these spams: <br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=gruposantander.es" rel="tag">gruposantander.es</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=%257Ejosetteb" rel="tag">~josetteb</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?88</link>
<title><![CDATA[Cheating message via Skype]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Sun, 22 Apr 2007 15:51:28 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?88</guid> 
<description>
<![CDATA[ 
	We have received some reports about some Chinese cheating messages are spreading via Skype. These messages are masquerated as the Skype system message that the receiver has been lucky to win a gift. Please don&#039;t believe it.<br/><br/>The cheating messages are like the following: <br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=skype" rel="tag">skype</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?82</link>
<title><![CDATA[Phising mails about Banesto]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Mon, 16 Apr 2007 14:28:56 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?82</guid> 
<description>
<![CDATA[ 
	We received some phishing mails about <strong>Banesto.es</strong>. Spanish users should be careful.<br/><br/>The phishing mails are as the following:<br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=ibanesto.hk" rel="tag">ibanesto.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=banesto.es" rel="tag">banesto.es</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?57</link>
<title><![CDATA[Poste Italiane phishing]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Wed, 21 Mar 2007 10:41:15 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?57</guid> 
<description>
<![CDATA[ 
	We just received a phishing email masquerated from <strong>Poste Italiane</strong>(poste.it).<br/><br/>The phishing email is as the following:<br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=kazetohikari.com" rel="tag">kazetohikari.com</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?55</link>
<title><![CDATA[Lots of .hk domain phishings]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Sat, 17 Mar 2007 15:57:56 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?55</guid> 
<description>
<![CDATA[ 
	We&#039;ve received many phishing emails which were masqueraded from &quot;<strong>USbank</strong>&quot; and &quot;<strong>Branch Banking &amp; Trust</strong>&quot; these two days. It&#039;s very interesting that there are many different .hk domains in these phishing emails. The .hk domains can be regesitered on <a href="https://www.hkdnr.hk" target="_blank"><u>HKDNR &amp; HKIRC</u></a>. We decide to post these domains to let everyone know.They are include:<br/><div class="code">ecoit.hk, edllsdk.hk, hkpermanent.hk, ident.hk, itprodll.hk, jdllid.hk, lltco.hk, seem.hk, toptenret.hk, troniekweb.hk</div><br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=ecoit.hk" rel="tag">ecoit.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=edllsdk.hk" rel="tag">edllsdk.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=hkpermanent.hk" rel="tag">hkpermanent.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=ident.hk" rel="tag">ident.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=itprodll.hk" rel="tag">itprodll.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=jdllid.hk" rel="tag">jdllid.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=lltco.hk" rel="tag">lltco.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=seem.hk" rel="tag">seem.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=toptenret.hk" rel="tag">toptenret.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=troniekweb.hk" rel="tag">troniekweb.hk</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=85.130.89.181" rel="tag">85.130.89.181</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?41</link>
<title><![CDATA[Phising: Bank of America]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Sat, 03 Mar 2007 15:27:02 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?41</guid> 
<description>
<![CDATA[ 
	Phising emails come to our mailbox everyday.We received two phisings about Bank of America today. The phising web is still active until now.We hope everyone can be careful of these phising webs.<br/><br/>The phishing emails pretend to be the content as &quot;Your Online Banking is Blocked&quot;, &quot;Online Banking Update Notification&quot;.<br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?32</link>
<title><![CDATA[Phising Paypal emails]]></title> 
<author>Moonny &lt;amezhs@cisrt.org&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Fri, 16 Feb 2007 08:55:00 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?32</guid> 
<description>
<![CDATA[ 
	We received some Paypal phishing emails these days. Be careful please!<br/><br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a>
]]>
</description>
</item><item>
<link>http://www.cisrt.org/enblog/read.php?17</link>
<title><![CDATA[Citibank Deutschland phish]]></title> 
<author>smallmo &lt;smallmo@cisrt.com&gt;</author>
<category><![CDATA[Phising]]></category>
<pubDate>Mon, 05 Feb 2007 09:52:36 +0000</pubDate> 
<guid>http://www.cisrt.org/enblog/read.php?17</guid> 
<description>
<![CDATA[ 
	We received a <strong>Citibank</strong> Deutschland phishing email today.If you are Germany people,please be careful.<br/><br/>The phishing email is like the following:<br/>............<br/><br/>Tags - <a href="http://www.cisrt.org/enblog/tag.php?tag=phishing" rel="tag">phishing</a> , <a href="http://www.cisrt.org/enblog/tag.php?tag=citibank" rel="tag">citibank</a>
]]>
</description>
</item>
</channel>
</rss>