这个攻击仍然是用假的email界面来骗密码： http://mcbud.com.ua/wp-admin/gmal.htm
下面是邮件源代码：
Delivered-To: [email protected] Received: by 10.220.93.69 with SMTP id u5csp22318vcm; Wed, 22 May 2013 17:03:21 -0700 (PDT) X-Received: by 10.224.214.134 with SMTP id ha6mr9314238qab.77.1369267401151; Wed, 22 May 2013 17:03:21 -0700 (PDT) Return-Path: <[email protected]> Received: from mtaz1.mailnet.ptd.net (mtaz1.mailnet.ptd.net. [204.186.29.65]) by mx.google.com with ESMTP id i6si3435400qcj.76.2013.05.22.17.02.50 for <multiple recipients>; Wed, 22 May 2013 17:03:21 -0700 (PDT) Received-SPF: pass (google.com: domain of [email protected] designates 204.186.29.65 as permitted sender) client-ip=204.186.29.65; Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 204.186.29.65 as permitted sender) [email protected] Received: from mb9.mailnet.ptd.net (mb9.mailnet.ptd.net [204.186.29.19]) by mtaz1.mailnet.ptd.net (Postfix) with ESMTP id B87DC320DD5; Wed, 22 May 2013 20:02:36 -0400 (EDT) Date: Wed, 22 May 2013 20:02:37 -0400 (EDT) From: Gmail <[email protected]> Message-ID: <[email protected]> Subject: =?ISO-8859-1?Q?1_New_Message_From_Gmail=AE?= MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_24454961_2070092835.1369267356998" X-Originating-IP: [41.71.190.34] X-Mailer: Zimbra 7.2.3_GA_2872 (ZimbraWebClient - FF3.0 (Win)/7.2.3_GA_2872) To: undisclosed-recipients:; ------=_Part_24454961_2070092835.1369267356998 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable You Have One New Message from Gmail "VIEW MESSAGE" About Gmail Media Career= s Legal stuff Contact us=20 Site map Our cookies =A9 2013 Gmail Media. All rights reserved=20 ------=_Part_24454961_2070092835.1369267356998 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><= div style=3D'font-family: times new roman,new york,times,serif; font-size: = 12pt; color: #000000'>You Have One New Message from Gmail <a href=3D"= http://mcbud.com.ua/wp-admin/gmal.htm">"VIEW MESSAGE"</a> About Gmail = Media Careers Legal stuff Contact us <br> Site map Our cookies =A9 2013 Gmail Media. All rights reserved<br> </div></body></html> ------=_Part_24454961_2070092835.1369267356998--
