[e-gold-list] New phish (apparently)

Paul Davis paul at davis-company.com
Sat Aug 5 22:55:33 MDT 2006


I received the following just now, which is the second of two
related messages I've received today, both purporting to be from
e-gold and announcing that "new security feature".  What sort of
tipped me off that it was bogus was that the message was sent to
an address from which I get mail but which has nothing to do with
any dealings I have ever had with e-gold.  Apparently they're
just spamming this out to whatever lists they've acquired. 

The message had, as indicated, an attachment, which I assume is
some sort of trojan.  Note the instruction for the user to push
it past his anti-virus program (yeah, sure!)  But I have no doubt
some people will fall for it.  Here's the message:

As one of e-gold's highly valued customers, you have been
selected to be part of the first group of e-gold user's to have
access to the new security feature.

You should have already received an e-mail detailing the new
security feature - the AccSentKey. In case you missed it, here is
a brief overview: 

AccSentKey further empowers you to restrict access to your e-gold
account by placing a Private Key File on your primary
computer(s). This prevents unauthorized computers from accessing
your e-gold account, even if current security measures are
circumvented, and your password is maliciously obtained/stolen.

e-gold is currently beginning it's phase in of this new security
measure.
By October 1, 2006 e-gold's servers will verify the existence of
this Key file every time you access your account. If you do not
have this key file on your computer you will be unable to access
your e-gold account.

Attached to this e-mail message, please find AccSentKey.zip. You
will need an UnZip program to open this file (e.g. WinZip,
WinRAR, etc.). Inside, you will find the E-gold Private Key
Generation Wizard, which will lead you thru the process of
creating your new Private Key.

Please note, that as this is a priliminary release, being done
only by e-mail, our software development team has taken the
liberty of 'packing'
(compressing) the software, to decrease the filesize. As such,
some heuristic-based anti-virus software may report that the
software is 'packed', however, it should also inform that the
software is otherwise 'clean' (contains no virus). The final
release of this software will be uncompressed to eliminate any
potential issue.

Best Regards,
Dr. Douglas Jackson
Founder of e-gold

- e-gold security team



---
You are currently subscribed to e-gold-list as: e-gold-list at kobly.com
To unsubscribe send a blank email to leave-e-gold-list-512001C at talk.e-gold.com

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) via the web and shopping cart interfaces to help thwart keystroke loggers and common viruses.


More information about the E-gold-list mailing list