Reference: Corriere della Sera (newspaper)

Repayments on the web ... obviously FALSE !!! Always be careful!

Also this time, the email proves to be not only false because there are no repayments, but also dangerous because the link connect to a my-securedoc.com website that is registered to ... no one and registered only for a year from April 2007 and that, the sender, called Gianluca Torretta, gianluca.torretta@tin.it doesn't result reachable.

Whois Record

Domain name: my-securedoc.com

Registrant Contact:
  han gang
  gang han  ttggbb2@126.com  
  0123-4567890 fax: 0123-4567890
  Sichuan
  Sichuan Sichuan 437665
  cn

Administrative Contact:
  gang han  ttggbb2@126.com  
  0123-4567890 fax: 0123-4567890
  Sichuan
  Sichuan Sichuan 437665
  cn

Technical Contact:
  gang han ttggbb2@126.com  
  0123-4567890 fax: 0123-4567890
  Sichuan
  Sichuan Sichuan 437665
  cn

Billing Contact:
  gang han ttggbb2@126.com  
  0123-4567890 fax: 0123-4567890
  Sichuan
  Sichuan Sichuan 437665
  cn

DNS:
ns1.sinwe.com
ns2.sinwe.com

Created: 2007-04-05
Expires: 2008-04-05

So ATTENTION because the link written in the e-mail invites the user to open a web page in which you can see the document in too small dimension. The user, invite to click on to read the document, downloads a trojan.hijacker of the dimensions of 32.512 bytes.

Done this, the trojan adds into the list of the trusted sites the following ones:

coppieesibizioniste.biz
gooogle.bz
my-securedoc.com
mysessoblog.com
mycreditoweb.com
phishnigfix.biz
preferiti-windows.com
ricercadoppia.com
qoogler.com

The home page of Internet Explorer is redirected to another misleading site, gooogle.bz and the areas of Internet Explorer are affected.

To avoid unpleasant surprises, we invite you always to get in touch with your consultant and ask informations before proceeding with the indications reported in this type of e-mail.