If anyone has had emails purportedly from Sipgate with the following
content, they are phishing scams and are NOT from Sipgate. A friend has
had two recently, one with an executable, so take care:
>Dear Sipgate Member,
>
>We have temporarily suspended your email account
>mailto:xxxxxx@xxxxxx.co.uk.
>
>This might be due to either of the following reasons:
>
>1. A recent change in your personal information (i.e. change of address).
>2. Submiting invalid information during the initial sign up process.
>3. An innability to accurately verify your selected option of
>subscription due to an internal error within our processors.
>See the details to reactivate your Sipgate account.
>
>Sincerely,The Sipgate Support Team
also
>Dear user xxxxxx,
>
>It has come to our attention that your Sipgate User Profile ( x ) records
>are out of date. For further details see the attached document.
>
>Thank you for using Sipgate!
>The Sipgate Support Team
>+++ Attachment: No Virus (Clean)
>+++ Sipgate Antivirus - http://www.sipgate.co.uk
Ivor Jones wrote:
> If anyone has had emails purportedly from Sipgate with the following
> content, they are phishing scams and are NOT from Sipgate. A friend has
> had two recently, one with an executable, so take care:
>
>> Dear Sipgate Member,
>>
>> We have temporarily suspended your email account
>> mailto:xxxxxx@xxxxxx.co.uk.
>>
>> This might be due to either of the following reasons:
>>
>> 1. A recent change in your personal information (i.e. change of address).
>> 2. Submiting invalid information during the initial sign up process.
>> 3. An innability to accurately verify your selected option of
>> subscription due to an internal error within our processors.
>> See the details to reactivate your Sipgate account.
>>
>> Sincerely,The Sipgate Support Team
>
> also
>
>> Dear user xxxxxx,
>>
>> It has come to our attention that your Sipgate User Profile ( x ) records
>> are out of date. For further details see the attached document.
>>
>> Thank you for using Sipgate!
>> The Sipgate Support Team
>> +++ Attachment: No Virus (Clean)
>> +++ Sipgate Antivirus - http://www.sipgate.co.uk
>
> I never heard of Sipgate Antivirus..!
>
> Please be on the lookout for this.
>
>
> Ivor
>
>
Nothing new. Its the W32/Mytob virus that has been around since
2005-ish. Any half decent AV package will find it and kill it.
"Ivor Jones" <ivor@despammed.invalid> wrote in message
news:571vdpF2b4d6lU1@mid.individual.net...
>
> If anyone has had emails purportedly from Sipgate with the following
> content, they are phishing scams and are NOT from Sipgate. A friend has
> had two recently, one with an executable, so take care:
>
>>Dear Sipgate Member,
>>
>>We have temporarily suspended your email account
>>mailto:xxxxxx@xxxxxx.co.uk.
>>
>>This might be due to either of the following reasons:
>>
>>1. A recent change in your personal information (i.e. change of address).
>>2. Submiting invalid information during the initial sign up process.
>>3. An innability to accurately verify your selected option of subscription
>>due to an internal error within our processors.
>>See the details to reactivate your Sipgate account.
>>
>>Sincerely,The Sipgate Support Team
>
> also
>
>>Dear user xxxxxx,
>>
>>It has come to our attention that your Sipgate User Profile ( x ) records
>>are out of date. For further details see the attached document.
>>
>>Thank you for using Sipgate!
>>The Sipgate Support Team
>>+++ Attachment: No Virus (Clean)
>>+++ Sipgate Antivirus - http://www.sipgate.co.uk
>
> I never heard of Sipgate Antivirus..!
>
> Please be on the lookout for this.
>
>
> Ivor
Hi Ivor,
its W32/Zotob.J or one of its varients.
This explains how it works, as you can see "Sipgate" can be replaced with
any string gleaned randomly from the victims email "from" headers.
Ivor Jones wrote:
> "Desk Rabbit" <nospam@example.com> wrote in message
> news:v-SdnQcyechKQJbbnZ2dneKdnZydnZ2d@pipex.net
>
> [snip]
>
>> Nothing new. Its the W32/Mytob virus that has been around
>> since 2005-ish. Any half decent AV package will find it
>> and kill it.
>
> Almost certainly, as you say. But I hadn't seen the message text
> purporting to be from Sipgate before.
The domain name is a variable in the virus code, it just as easily been
bbc.co.uk etc..
>> http://www.sophos.co.uk/virusinfo/an...32mytobat.html
>>
>> Now, if you had posted the headers we might have been
>> able to trace the source which would have been far more
>> useful.
>
> Unfortunately I wasn't given them, only what you see, the emails were to a
> friend not me.
"Desk Rabbit" <nospam@example.com> wrote in message
news:28idndJ5Qs_leJHbRVnyuAA@pipex.net
[snip]
> > > Now, if you had posted the headers we might have been
> > > able to trace the source which would have been far
> > > more useful.
> >
> > Unfortunately I wasn't given them, only what you see,
> > the emails were to a friend not me.
>
> Then ask your friend for the headers.
Rob wrote:
> <Clavox@lancs.no-ip.co.uk> wrote in message
> news:cpin03t4ljp3v3bkl1g0ag4snq4oonmork@4ax.com...
>
> > YAWN.....YAWN
>
> Now there's a surprise!
It's only the Anti-Sipgate / Anti-Ivor idiot (Dexter)... Ignore him!
<Clavox@lancs.no-ip.co.uk> wrote in message
news:7i2t03tj5inqc4s5tn6qo96d0oclbujuuc@4ax.com
> On 31 Mar 2007 09:12:44 -0700, "The Last Outpost"
> <the_last_outpost@ntlworld.com> wrote:
>
> >
> > Rob wrote:
> > > <Clavox@lancs.no-ip.co.uk> wrote in message
> > > news:cpin03t4ljp3v3bkl1g0ag4snq4oonmork@4ax.com...
> > >
> > > > YAWN.....YAWN
> > >
> > > Now there's a surprise!
> >
> > Anti-Ivor idiot (Dexter).
> >
> > Nick.
> Takes one to know one Nick and incidently it WAS Ivor who
> started the yawn stupidity but I fully intend to finish
> it and if you are anyone else dosen't like it tough .
> Now FOAD .
Sipgate Phishing scam found 
Linear Mode
