Reglikedomain industry desk

Service Hit by Phishing Attack — Hover Email

Service Hit by Phishing Attack — Hover Email

Domain registrar’s personalized email service is target of phishers.

HoverHover Personalized Email, a service from Tucows, is reporting that its members are receiving phishing emails.

The services lets you sign up for a personalized email address using one of Tucows’ 40,000 last name domain names, which it obtained when it purchased NetIdentity. For example, people with the last name Smith can get [email protected].

Here’s an example of the phishing email:

From: [email protected] [mailto:[email protected]]
Sent: donderdag 7 januari 2010 14:27
To: [email protected]
Subject: A fresh settings file for the [email protected]
has just been released

Dear user of the smith.net mailing service!

We are informing you that since of the security upgrade
of the mailing service your mailbox ([email protected]) settings
were changed. In order to apply the fresh set of settings click
on the following link:

http://smith.net/owa/service_directory/settings.php?email=diana
&diana&from=smith.net&fromname=diana

Best regards, smith.net Technical Support.

Of course the link is spoofed in the actual email. Hover stresses that all emails coming from Hover will be clearly identified as being from Hover, not something like smith.net.

Also on the wire

Other reporting from the domain desk.