Phishing desde Caja Rural
Esta mañana recibía el correo, supuestamente desde Caja Rural (no tengo cuenta allí), con un archivo .rar mas que sospechoso … No hay mucho mas, a la papelera.
Return-Path:
Received: from drive.rprinteriores.com (drive.rprinteriores.com [86.106.104.147])
by xxxxxx with ESMTP id 56L9KxEV147733
for
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=rprinteriores.com; s=mail; h=Message-ID:From:Date:Content-Type:MIME-Version
:Subject:To:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=UjdmYuETBMNad9GJz3h1HD8sYLN9pJUl+8x0lNDVLZo=; b=UOrDvLGlstwzCHXYpr8BgBP4uY
ieLjnsR7ow6HTklZ5KA6XAFMRkQdwPlvO01dYFASMh3//NRm7ZbJGylSyluD0sI0dLJYvj4nCKWz/
bcNnw0CIIYxHZAbXWY2rc/jwiOrTl8IOIyISUn9TUJAUZEMbESeC5PIcxl1y3mVQt3d4=;
Received: from admin by drive.rprinteriores.com with local (Exim 4.92.3)
(envelope-from
id 1udmbs-0006zS-RO; Mon, 21 Jul 2025 05:15:00 -0400
To: undisclosed-recipients:;
Subject: TRANSFERENCIA
X-PHP-Originating-Script: 0:rcube.php
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=»=_81140e5069f781f921ae8a70a8ea09ea»
Date: Mon, 21 Jul 2025 10:15:00 +0100
From: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]