Follow

Oh, now that's an interesting cryptocurrency-related phish.

Plaintext email that passed the spam filter, "new ICO offers free ETH".

The email links to hxxps://hydrominer.biz/ which has a prominent "please sign in" section linking to hxxps://rnyetherwa11et.com/ - which Google Cache doesn't have,
so I'm guessing that site got pwned?

Email headers: pastebin.com/fChcfrzx

mastodon.social/media/czsEWkPy mastodon.social/media/VAZBLKlP mastodon.social/media/r5ZX1IT2

· · Web · 0 · 0 · 0
Sign in to participate in the conversation
Mastodon

Server run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!