Alerts
BOOKMARK THIS ALERT
digg
|
del.icio.us
|
reddit
newsvine
|
furl
|
technorati
Tribunal Superior Eleitoral
Date:08.16.2006
Threat Type: Phishing Alert
Websense® Security Labs™ has received reports of a new phishing attack that targets customers of the Brasilian Tribunal Superior Eleitoral.
Users receive a spoofed email message claiming that their entry in the electoral roll has been cancelled. To learn the reason for the cancellation and be able to reinstate their right to vote at the upcoming elections, they will have to read the attached regulations. The link provided by the email leads to a download for a Trojan that installs malicious code on the user's computer.
The URL leading to the malicious code is hosted in Korea and was up at the time of this Alert.
Translated sample Phishing email text:
Brasilia, 16th of August 2006
We inform you that your Electoral Title has been temporarily cancelled. The reason for the cancellation was an irregularity in your Registry of Physical Persons (CPF); for this reason, the suspension of the latter and of your electoral title.
To have more details over these irregularities and which steps to take, read the regulation by clicking on the link below. After clicking the link you will be presented with a window where you will have to click on the option "open/run".
< LINK REMOVED >
or if this fails click here < LINK REMOVED >
All rights reserved to the Supreme Court for Elections.
Phishing Screenshot:
