Some HIS customers reported getting emails pretending to be from his.com and containing a bogus alert message.
From: “his.com support” <admin@his.com>
Subject: his.com account notification
or
Subject: Returned mail: see transcript for details
From: domains@megginson.com
We are blocking them on our SPAm filters. However, if you received one of those
Do not click on any link or attachment, or your computer will get infected.
———————————
Here is the text of the bogus messages we’ve seen lately:
From: “his.com support” <admin@his.com>
Subject: his.com account notification
Dear Customer,
This e-mail was send to notify you that we have temporanly prevented
access to your account.
We have reasons to beleive that your account may have been accessed by
someone else.
Please run attached file and Follow instructions
———————————
Subject: Returned mail: see transcript for details
From: domains@megginson.com
Dear user of his.com,
Your e-mail account was used to send a large amount of unsolicited commercial e-mail during the last week.
Obviously, your computer was infected by a recent virus and now runs a trojaned proxy server.
Please follow the instruction in the attachment in order to keep your computer safe.
Have a nice day,
The his.com support team.
———————————