<div dir="ltr"><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Solania Ormaza (Tucows Inc)</b> <span dir="ltr"><<a href="mailto:support@tccompliance.zendesk.com">support@tccompliance.zendesk.com</a>></span><br>Date: Tue, Sep 20, 2016 at 9:57 PM<br>Subject: [Tucows Inc - Compliance] Re: Malware complaint: <a href="http://tor2web.org">tor2web.org</a><br>To: "<a href="mailto:virgil.griffith@gmail.com">virgil.griffith@gmail.com</a>" <<a href="mailto:virgil.griffith@gmail.com">virgil.griffith@gmail.com</a>><br><br><br><u></u>
<div style="width:100%!important;margin:0;padding:0">
<div style="padding:10px;line-height:18px;font-family:'Lucida Grande',Verdana,Arial,sans-serif;font-size:12px;color:#444444">
<div style="color:#b5b5b5">##- Please type your reply above this line -##</div>
<p>Your request (124747) has been solved. To reopen this request, reply to this email.<br><br></p><div style="margin-top:25px"><table width="100%" cellpadding="0" cellspacing="0" border="0"><tbody><tr><td width="100%" style="padding:15px 0;border-top:1px dotted #c5c5c5"> <table width="100%" cellpadding="0" cellspacing="0" border="0" style="table-layout:fixed"><tbody><tr><td valign="top" style="padding:0 15px 0 15px;width:40px"> <img alt="Solania Or" height="40" style="min-height:auto;line-height:100%;outline:none;text-decoration:none;border-radius:5px" width="40"></td> <td width="100%" style="padding:0;margin:0" valign="top"> <p style="font-family:'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif;font-size:15px;line-height:18px;margin-bottom:0;margin-top:0;padding:0;color:#1b1d1e"> <strong>Solania Ormaza</strong> <span>(Tucows Inc - Compliance)</span> </p> <p style="font-family:'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif;font-size:13px;line-height:25px;margin-bottom:15px;margin-top:0;padding:0;color:#bbbbbb"> Sep 20, 09:57 EDT </p> <div style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0"><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">Hello</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">Please see complaint received regarding subject domain and respond accordingly</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">***</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">RSA Anti-fraud Command Center <a href="mailto:afcc@rsa.com" rel="noreferrer" target="_blank">afcc@rsa.com</a><br>Friday 10:00</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">BBVA - E2228848</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">To whom it may concern:</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">RSA, The Security Division of EMC (“RSA”), an information security company, has detected and verified that a Malware (as defined below) program is being propagated from a server which is associated with the following URL:</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">(the “Designated Site”)</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">From our review, it is our understanding that you operate the Designated Site and that it is, therefore, under your control.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">For the purposes of this letter, “Malware” means any software applications or executables that perform actions unanticipated by and without the consent of the person running the software. Malware is distributed via many mechanisms including, but not limited to: email attachments; content injection such as cross site scripting; exploiting security vulnerabilities in operating systems and other software; and/or insertion into downloadable software. Malware is designed, among other things, to misappropriate personal data in order to engage in fraudulent transactions using that data, and/or to compromise and co-opt an end-user’s networked computer; all for the purpose of performing illegal or improper acts such as misappropriating funds; carrying out denial of service attacks; and sending unsolicited mass emails.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">For your information, we have analyzed the specific Malware and enclose a file, which includes:</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">* Malware name: Ransom <br>* Description:Ransomware is computer malware which holds a computer system, or the data it contains, hostage against its user by demanding a ransom for its restoration. <br><a href="http://www.symantec.com/connect/node/1618951" rel="nofollow noreferrer" target="_blank">http://www.symantec.com/<wbr>connect/node/1618951</a> <br>* <a href="http://5n7y4yihirccftc5.tor2web.org/" rel="nofollow noreferrer" target="_blank">http://5n7y4yihirccftc5.<wbr>tor2web.org/</a></p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">This file also details the method by which it appears that the Malware is downloaded to a victim’s computer.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">In this instance, it is our belief that the specific purpose of the Malware is to misappropriate account credentials and identity information from the customers of one or more financial institutions in order to access their bank accounts fraudulently.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">Therefore, we request that you immediately take all actions necessary to disable and remove this Malware from the Designated Site.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">We specifically would ask that you also take the following actions: Please provide us with a tar/zip file of all the content located under the Malware's path (including hidden files), so that we may analyze it to help prevent further attacks. If any customer data has been captured that is stored on your systems or equipment, please send us that data so that the customers to whom that data relates can be notified and take steps to protect their credit. Please provide a copy of any records you maintain that indicate the name, contact information, method of payment or similar information that may be useful in helping learn about the identity and location of the customer for whom the website has been operated.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">We would appreciate your email confirmation that the source of the Malware infection has been disabled.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">We understand that you may not be aware of the above described improper use of the Designated Site and we thank you for your cooperation in the prevention of fraudulent online activity. The foregoing is without prejudice to any and all rights and remedies of any financial institution impacted by the improper use of the Designated Site, which rights and remedies are hereby expressly reserved. <br>If you need further information, please do not hesitate to contact RSA at the numbers below.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">Sincerely, <br>RSA SECURITY INC.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">RSA Anti-Fraud Command Center <br>Tel: <a href="tel:%2B44%20%280%29800-032-7751" value="+448000327751" target="_blank">+44 (0)800-032-7751</a> (UK) <br>Tel: <a href="tel:%2B1-866-408-7525" value="+18664087525" target="_blank">+1-866-408-7525</a> (US) <br>E-mail: <a href="mailto:afcc@rsa.com" rel="noreferrer" target="_blank">afcc@rsa.com</a><br>***</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0" dir="auto">Regards<br>Sol .O * Compliance Officer * Tucows Inc <br>96 Mowat Ave * Toronto * ON * M6K 3M1 <br><a href="mailto:compliance@tucows.com" rel="noreferrer" target="_blank">compliance@tucows.com</a></p></div> </td> </tr></tbody></table></td> </tr></tbody></table></div>
<div align="center" style="color:#aaaaaa;margin:10px 0 14px 0;padding-top:10px;border-top:1px solid #eeeeee">
<a href="http://tucowsdomains.com" target="_blank"><img alt="Tucows" border="0"></a>
</div>
<div style="color:#aaaaaa;margin:10px 0 14px 0;padding-top:10px;border-top:0px solid #eeeeee">
This email is a service from Tucows Inc - Compliance.
</div>
</div>
<span style="color:#ffffff">[JOVOXE-XZ31]</span></div>
</div><br></div>