January 18, 2014 at 12:45An attempt to drain the BillManager client database
This morning they found such an interesting letter in their mail:
Apparently, someone is trying to gain access to the BillManager installed on hosters of various sizes and gain access to commercial information (possibly leaking databases). Or maybe just ruin the assumption that not everyone makes backups.
The form, of course, is not sent to ISPsystem, but somewhere in the distance, to samsungtv24.tk/isplog.php . It is interesting that the letter arrived on Friday late in the evening. Perhaps the calculation was that at such a time or on a Saturday morning, the brains are still working slowly, and someone will get caught.
ISPsystem sent out phishing scam warnings that very night (many thanks to customer care and responsiveness), but apparently its purpose was somewhat misinterpreted:
In our opinion, the target was client bases or some other commercial information hosters. Our company received a letter to its primary contact address, and not to the ISPsystem indicated in the billing. Thus, the customer base of the ISPsystem itself was not compromised.
I hope this message saves someone on a Saturday morning from sudden actions. Have a nice weekend.
Apparently, someone is trying to gain access to the BillManager installed on hosters of various sizes and gain access to commercial information (possibly leaking databases). Or maybe just ruin the assumption that not everyone makes backups.
The form, of course, is not sent to ISPsystem, but somewhere in the distance, to samsungtv24.tk/isplog.php . It is interesting that the letter arrived on Friday late in the evening. Perhaps the calculation was that at such a time or on a Saturday morning, the brains are still working slowly, and someone will get caught.
ISPsystem sent out phishing scam warnings that very night (many thanks to customer care and responsiveness), but apparently its purpose was somewhat misinterpreted:
In our opinion, the target was client bases or some other commercial information hosters. Our company received a letter to its primary contact address, and not to the ISPsystem indicated in the billing. Thus, the customer base of the ISPsystem itself was not compromised.
I hope this message saves someone on a Saturday morning from sudden actions. Have a nice weekend.
