Dear Sir/Madam, We are Axur’s internet security incident response team. Axur is an information security company based in Brazil and a member of the most important international organizations to combat internet fraud, such as APWG, M3AAWG and FIRST. If you need more information about our company, please refer to our official website at axur.com. We are sending you this message because you are the WHOIS contact for the network hosting this malicious artifact. This message is intended for the person responsible for computer security at your site. If this is not the correct address, please forward this message to the appropriate party or inform us who we should contact. Our monitoring tools indicate that your site is hosting a malicious artifact. It seems to be a malware used in phishing/scam schemes for identity theft.
The artifact is hosted at: https://debito.googlecode.com/svn/Extrato%20do%20Debito.rar Hostname: debito.googlecode.com with IP address: 74.125.22.82 and affects financial instituitions such as: http://www.sicredi.com.br/ We kindly ask your cooperation to: * remove the malicious files from your site; * verify whether this machine has been compromised and it's being used by intruders to host malicious files, or a legitimate user is engaged in activity that is probably in violation of your Terms of Service. In case we detect more than one malicious code hosted on your network, you will receive multiple messages similar to this, each one containing different evidence. Thanks in advance. We would also appreciate if you could provide a confirmation that this message has been received and an estimate of the time to shutdown. Best regards, CSIRT Axur +55 51 4063-9836 www.axur.com This report was adapted from the model provided by CERT.BR (http://www.cert.br/docs/whitepapers/notificacoes/) -- You received this message because you are subscribed to the Google Groups "Project Hosting on Google Code" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-code-hosting. For more options, visit https://groups.google.com/d/optout.
