Fellow blogger, Yasir Auleear, wrote today about a phishing email that he received. He shared the email header and we can see the message originated from www.pan.mr and not mcb.mu.
Image courtesy, yasirmx.net
PAN is an abbreviation for Port Autonome de Nouadhibou as seen on the www.pan.mr website. The cyber criminal(s) behind the MCB Internet Banking phishing scam compromised this website & used its mailserver. Currently, part of the website does not look good ^^
The website runs on Joomla and web trails indicate it has been defaced & compromised in the past as well. At the moment the website is slow to load, which could be the result from a busy server sending tons of emails :-)