Recently, when using gmail, you will be prompted to enter your username and password when you log on to the console. I found it strange to check the page source code, which is actually a phishing activity. The source code is as follows:
I use gmail to directly click the button on the Google Toolbar, but the computer at home and in the company will be hijacked. In particular, the Mac company at home is Windows, it is impossible to have the same trojan at the same time. It should be because the operator (both sides of the network are Beijing Unicom) is doing something wrong with the network. In addition, I searched for information about the ndns01.com domain name and found a post in July this year.
Solution: Always Use https to access Gmail and manually enter the URL.
If you have already entered a password on such a phishing page, it is recommended that you change the password immediately, and then check the filter settings of the Gmail account to see if there is a filter for forwarding emails to external unfamiliar mailboxes.
UPDATE: I saw a friend's message below, saying that the telecom line also had this problem. It does not look like a single operator. It may be wrong for Beijing Unicom.
China's largest network security site Source: html "> http://www.hackbase.com/tech/2010-08-09/60986.html