[情報] 合庫網銀疑似被盜個資

作者: teras (Tera)   2016-03-10 01:13:16

收到上述郵件圖檔+一個.ZIP 檔
.ZIP我不敢開 ><
個資法好像有規定發生個資洩漏, 行銀要負舉證責任, 有疏失就要賠錢哭哭惹
查了一下E_MAIL的表頭如下, 看來是從UK寄來的...
Return-Path: <php-mail@WEB205.extendcp.co.uk>
Received: from msa-sms5-4.hinet.net (msa-sms5-4.hinet.net [168.95.7.114])
by msa-smtp4.hinet.net (8.14.2/8.14.2) with ESMTP id u293Xo71024598
for <XXXX.XXXX@msa.hinet.net>; Wed, 9 Mar 2016 11:33:50 +0800 (CST)
Received: from msa.hinet.net (msa-msr20.hinet.net [168.95.6.20])
by msa-sms5-4.hinet.net (8.14.2/8.14.2) with ESMTP id u293XnRh020799
for <XXXX.XXXX@msa.hinet.net>; Wed, 9 Mar 2016 11:33:49 +0800
Received: from mailscan1.extendcp.co.uk (mailscan39.extendcp.co.uk
[176.32.230.33])
by msa.hinet.net (8.14.2/8.14.2) with ESMTP id u293XCYU024973
for <XXXX.XXXX@msa.hinet.net>; Wed, 9 Mar 2016 11:33:38 +0800 (CST)
Received: from mailscanlb0.hi.local ([10.0.44.160] helo=mailscan2.hi.local)
by mailscan-g69.hi.local with esmtp (Exim 4.80.1)
(envelope-from <php-mail@WEB205.extendcp.co.uk>)
id 1adUsS-0005di-IG
for XXXX.XXXX@msa.hinet.net; Wed, 09 Mar 2016 03:33:36 +0000
Received: from mailscanlb0.hi.local ([10.0.44.160] helo=web206.extendcp.co.uk)
by mailscan2.hi.local with esmtp (Exim 4.80.1)
(envelope-from <php-mail@WEB205.extendcp.co.uk>)
id 1adUsQ-0001Ut-4C
for XXXX.XXXX@msa.hinet.net; Wed, 09 Mar 2016 03:33:36 +0000
Received: from WEB205.webhosting.mainnameserver.com ([127.0.0.1]) by
web206.extendcp.co.uk with Microsoft SMTPSVC(7.5.7601.17514);
Wed, 9 Mar 2016 03:33:20 +0000
Date: Wed, 09 Mar 2016 03:33:20 +0000
Subject: Your online bank transfer of billing notifications
To: XXXX.XXXX@msa.hinet.net
MIME-Version: 1.0
From:TCB-BANK <coA033@tcb-bank.com.tw>
Reply-To: TCB-BANK <coA033@tcb-bank.com.tw>
合庫加油好嗎 QQ
請查照板規10,發文需大於3行50字
作者: dallasman (達拉斯小牛)   2016-03-10 01:43:00
快~去~告~
作者: bullbe36   2016-03-10 05:57:00
盜什麼資?
作者: RichHarden (A's)   2016-03-10 06:54:00
這完全構不成個資外洩的條件好嗎
作者: loomissayles (盧米斯賽勒斯)   2016-03-10 08:00:00
反串失敗
作者: isaacc (小元宅爸)   2016-03-10 08:04:00
唉,加油點,好嗎?
作者: alex1973 (alex1973)   2016-03-10 09:05:00
這個 header 唯一跟合庫相關的是 from 欄位寫的是 TCB你知道 from 欄位其實用某些發信軟體是可以任意寫的嗎 ?如果內文有寫你的個資 (譬如說開頭寫著你的中文名字) 再來說有個資外洩的嫌疑, 不然都是亂槍打鳥的不然照你這邏輯, 其實我可以告一堆國際性的跨國銀行集團因為我也常收到一些銀行通知我中獎, 通知我帳號有問題,blah blah..... 等等奇怪的通知信, 問題是我根本沒有那些銀行帳號啊 XD
作者: r1t1r (r1t1r)   2016-03-10 11:32:00
回去多念點書 單獨只有EMAIL不是個資你可以快跟金管會申訴 真是個資外洩可以讓銀行賠很多錢就怕你會被打臉打到哭出來

Links booklink

Contact Us: admin [ a t ] ucptt.com