Dear Outlook client, Notification ID: KG932J ========================================== - Please reconfigure your Microsoft Outlook information again . - Click on the link below to setup . http://outlook-mail-setup.gert54d.from-ks.com/index.php?id=KG932J ========================================== Microsoft Outlook 2012 .
Obviously this is a phishing thing. What's interesting is that the url refers to an IP address at MIT. The address is no longer active as far as I can tell, but it seems to have belonged to the MIT VPN network, because other addresses on the same /24 block are attached to vpn-ip.mit.edu urls.
So, my guess is that someone set up a site on the MIT VPN to direct their phishing business. That's all I've got.
Oh, coincidentally, just yesterday I was reading about VPNs, wondering about a convenient way to get past the China firewall from the inside. Seeing that MIT has a VPN makes me wonder if Harvard has one, and if I can use it...
No comments:
Post a Comment