Earlier today, Trend Micro found a phishing site which poses as a donation site to raise money for victims of the recent earthquake in Japan. The phishing site, http://www.japan{BLOCKED}.com, is created by using an open-source social network system Jcow 4.2.1. It is hosted on the IP address 50.61.{BLOCKED}.{BLOCKED}, which has been found to be located to be in the US. Tred Micro confirmed that the site is still active right now.
[attachment=32]
[attachment=33]
Aside from hosting a phishing site, the cybercriminal behind this attack also abused the blog function of the website and inserted advertisement-looking posts, possibly to increase SEO ranking.
[attachment=34]
More details - link
[attachment=32]
[attachment=33]
Aside from hosting a phishing site, the cybercriminal behind this attack also abused the blog function of the website and inserted advertisement-looking posts, possibly to increase SEO ranking.
[attachment=34]
More details - link
