Hi all,

We all know that e-gold is the easiest pay-proc to hack into, right?

If you don't, just do a Google search for the terms "hack e-gold" and you will see what I mean. It's pretty SCARY!

Anyway, I don't even have an e-gold account, yet I get this in my bulk folder today: WHATEVER YOU DO - DON'T CLICK ON THE LINK!!!!
___________________________________________________
** e-gold Account Information Update Notice **

e-gold account number: Secured
Items updated: Point of Contact
Update performed from IP address: 68.21.96.213
Time of update: 1/23/05 11:55:22 PM GMT

This automatic email notice lets you know that modifications have been
made to the Account Information settings for your e-gold account. The
current settings for your account can be viewed and modified at the
e-gold website by choosing the Account Info menu selection while
accessing your account.

Please login here: https://www.e-gold.com/acct/login.html

If you did not make a change to your account before receiving this email
message, you should immediately login e-gold using the link above and
correct unauthorized changes.

Please do not reply to this automatically generated email message.
__________________________________________________

WHATEVER YOU DO - DON'T CLICK ON THE LINK!!!!

The Status Bar shows this when your cursor is hovered above it:

http://213.114.127.125/acct/login.html

This is so obviously a phishing scam it feel as though someone is trying to insult my intelligence.

Is there any way of tracking the IP number or should I just report it to E-Gold and leave it in their hands?

Thanks! and Good Surfing to everyone.....

Slick

You could certainly track the IP number using a whois search and this is done all the time. A good general tool for checking things like this is http://www.dnsstuff.com/

In this case the first link that you show is a legitimate e-gold address. The second is a bogus address but seems to have already been shut down.

In future, if you will enclose links like these in single quotes they will not show as a clickable link.

_________________
MS MVP Security 2006-2008

I got this same message, unfortunately I do have an egold account and having heard of all the hacking going on there I clicked the link to check and see if my egold profile had been changed.

Dowloaded a version of I-Worm/Bofra to my puter, and I can't fix all the problems I have as a result of my stupidity!!!

Now I have to search the forum for the proper place to post my plea for help, just stopped here first to warn everyone.

I got another one of theses e-gold emails today, so I am posting it wih full headers in hopes someone will be keeping a database of thes jerks.

X-Apparently-To: XXXXX@yahoo.com via 206.190.37.155; Mon, 21 Feb 2005 01:37:17 -0800
X-YahooFilteredBulk: 195.70.10.40
Authentication-Results: mta347.mail.scd.yahoo.com from=e-gold.com; domainkeys=neutral (no sig)
X-Originating-IP: [195.70.10.40]
Return-Path: <webserver@dfinet.ch>
Received: from 195.70.10.40 (EHLO localhost.localdomain) (195.70.10.40) by mta347.mail.scd.yahoo.com with SMTP; Mon, 21 Feb 2005 01:37:17 -0800
Received: from localhost.localdomain (hosting [127.0.0.1]) by localhost.localdomain (8.12.8/8.12. with ESMTP id j1L9bGRE026762 for <laura90059@yahoo.com>; Mon, 21 Feb 2005 10:37:16 +0100
Received: (from www@localhost) by localhost.localdomain (8.12.8/8.12.8/Submit) id j1L9bGQq026758; Mon, 21 Feb 2005 10:37:16 +0100
Date: Mon, 21 Feb 2005 10:37:16 +0100
Message-Id: <200502210937.j1L9bGQq026758@localhost.localdomain>
X-Authentication-Warning: localhost.localdomain: www set sender to webserver@dfinet.ch using -f
To: XXXXXXX@yahoo.com
Subject: Notification of e-gold account update
From: "AccountRobot_donotreply@e-gold.com" <AccountRobot_donotreply@e-gold.com> Add to Address Book
Content-Type: text/html; charset=windows-1251
X-Priority: 3
Content-Length: 995





** e-gold Account Information Update Notice **

”https://www.e-gold.com/acct/login.html”
This automatic email notice lets you know that modifications have been made to the Account Information settings for your e-gold account. The current settings for your account can be viewed and modified at the e-gold website by choosing the Account Info menu selection while accessing your account.
If you did not make a change to your account before receiving this email message, you should immediately contact e-gold using the contact instructions available at the e-gold web site.
(For your security, never click a link in an email message to get to the e-gold web site.)
Please do not reply to this automatically generated email message.