Fake mail from Kurios

[T@rget]

Hi I got this mail from MMOwned a few minutes ago, obviously fake



So eh wtf? :P

[Dragonshadow]

Its obviously fake :/

[lag]

My email for MMOwned is only used to register this account and no place else (just changed it recently in fact.) What the hell...

[T@rget]

You got it too then lag?

[Remus]

A twit here on mmowned (now banned) Started it with it in the bawx presumably, viktor1908; what it does is if the page loads up a Java popup will appear- whether it is just the site (.tk) or the game itself; it attempts to download and install a trojan access CERNEL.EXE in the temp folder of APPDATA\LOCAL\

Huristic generic trojan, KIS2010 picked it up easily; but still update your databases for your antivirus.

[Errage]

If I recall, [email protected] is MATT's email, not KuR's. :P

[lag]

You got it too then lag?

Yeah I did. I'm a damn scrub though I didn't realize the forum published your registered address by default. I turned it off now -.- No big deal for me I can just close the account and make a new one

Didn't click on anything of course, shit looks faker than a mofo.

[Ket]

[email protected] is my email Also this is NOT a legit email. Stay away!

[lag]

Looks like the official thread be here. http://www.mmowned.com/forums/showthread.php?t=292556

[Sychotix]

It was from the official email. It was NOT spoofed, and came from web.mmowned.com (or something like that).

That being said, the link inside is a virus, and should not be clicked. Either there is an exploit to access the mass-emailer, matt's account was hacked, or the database was stolen and unhashed.

[email protected] is my email Also this is NOT a legit email. Stay away!

The email says otherwise.

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==

X-Message-Status: n:0

X-SID-PRA: [email protected] <[email protected]>

X-AUTH-Result: NONE

X-Message-Info: M98loaK0Lo2p925UDOmcnhJH24YO5A0HgYGSoPYgMgIDK0YPknxxH9uwNKZtH7H51qcVuOremvOQXKGS 4azwCMPYELqIPIUx

Received: from web.mmowned.com ([208.115.221.242]) by snt0-mc2-f12.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);

Mon, 26 Apr 2010 11:25:02 -0700

Received: from nobody by web.mmowned.com with local (Exim 4.69)

(envelope-from <[email protected]>)

id 1O6SzO-0007Ay-J0

for [email protected]; Mon, 26 Apr 2010 13:25:02 -0500

To: [email protected]

Subject: SupportMMOWNED

From: "[email protected]" <[email protected]>

Message-ID: <[email protected]>

MIME-Version: 1.0

Content-Type: text/plain; charset="ISO-8859-1"

Content-Transfer-Encoding: 8bit

X-Priority: 3

X-Mailer: vBulletin Mail via PHP

Date: Mon, 26 Apr 2010 13:25:02 -0500

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - web.mmowned.com

X-AntiAbuse: Original Domain - hotmail.com

X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]

X-AntiAbuse: Sender Address Domain - mmowned.com

Return-Path: [email protected]

X-OriginalArrivalTime: 26 Apr 2010 18:25:02.0911 (UTC) FILETIME=[C98C94F0:01CAE56D]



We need some report from our members to keep our site



online please visit [LINK REMOVED JUST IN CASE] to keep up our



Community.



With best regards Kurios

</

it was not spoofed.