I have just received an email from a close friend, which had "Pionee Red" as the subject, and the following body:
you've a new private message from your friend
Click To View The Full Message
As I hovered over the link, the following address appeared:
When I followed the link (from my VM), it took me to the screen below:
Where the email field was pre-filled with my actual email (not the one in the screenshot)
I went a little further and navigated to the IP contained in the original URL to see where that led, and it redirected many times before it finally took me to
...where I was invited to Date Crazy in Happy Hours with more than 30 000 thousands of Beautiful Girls from Russia
Is that even a number? Crazy stuff. Anyway, what I wanted to ask is:
- How badly might my friend's account be compromised?
- Which security steps should we take?
- Should we submit some sort of report anywhere about this?