Full Disclosure mailing list archives

Re: Western Union Certificate Error


From: adam <adam () papsy net>
Date: Thu, 8 Sep 2011 11:55:16 -0500

Enough about Western Union, let's hear about what's in that *ass* folder.

On Wed, Sep 7, 2011 at 9:40 AM, JT S <whytehorse () gmail com> wrote:

I recently got this error "You attempted to reach
www.westernunion.com, but instead you actually reached a server
identifying itself as wumt.westernunion.com. This may be caused by a
misconfiguration on the server or by something more serious. An
attacker on your network could be trying to get you to visit a fake
(and potentially harmful) version of www.westernunion.com. You should
not proceed."
Attached is a screenshot of the error and certificate info. SHA-256=9F
26 1E 37 F3 6A 34 88 AD 65 54 88 E0 5C 8A 13
C6 69 D4 FE 2A 25 0F DA 2C 51 13 1E 08 F8 DA 6F

Cert was issued by Comodo

A google of the SHA comes up with ICANN but other sites come up with
nothing... And then I read from comodo themselves they got breached
and fraudulent certs were issued...
http://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html


CONFIDENTIALITY NOTICE This E-Mail transmission (and/or the documents
accompanying it) is for the sole use of the intended recipient(s) and
may contain information protected by the attorney-client privilege,
the attorney-work-product doctrine or other applicable privileges or
confidentiality laws or regulations. If you are not an intended
recipient, you may not review, use, copy, disclose or distribute this
message or any of the information contained in this message to anyone.
If you are not the intended recipient, please contact the sender by
reply e-mail and destroy all copies of this message and any
attachments.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: