PDA

View Full Version : A craftier e-mail phisher


John Marsh
2nd Sep 2013, 10:43
This one is more plausible than many. The quality of English is within the current, declining standard.:* The e-mail I received contained no links to anywhere but Outlook, as far as I could tell. It got past the spam filter.

Here's a copy, from the Microsoft help forum at Bogus Outlook "account confirmation" email? - Microsoft Community (http://answers.microsoft.com/en-us/windowslive/forum/mail-wlsecurity/bogus-outlook-account-confirmation-email/8bce970d-11c1-4611-a94a-9e23cfb0e4c0)
IMMEDIATE ACTION REQUIRED
Dear Customer,
Outlook® accounts have been growing really fast.
We are having too many congested email due to the anonymous registration of Hotmail, Msn, and Live Accounts on our database system. Please reconfirm your email account and information to know if your account is still active and will also be recorded on our new database system.
We need you to reply and fill in the information below within one week or you will lose your account permanently.
*Username
*Password
*Date of birth
*Country or Territory
Here are some ways to help you manage your account after you reconfirm it.

1. Create an archive - Set up a folder on your PC’s hard drive where you can save large attachments. Then just delete them from your inbox. You’ll still have them and your inbox will be that much smaller.
2. Make your filters work for you- Did you know you can set up your Hotmail account to immediately delete junk e-mail? Go to Options, and click Filters and reporting. Under the “Delete junk e-mail” section, select Immediately to delete junk e-mail right away. Once you’re finished, click Save and you’re done.
3. Delete a bunch of mail at once- Go to your Junk and Deleted folders, and clear them out by clicking the “Empty” button in the action bar.

If you have more questions, please read our help topic on Hotmail storage.
Sincerely,
Outlook Team
The forum advice is: it's bogus. My suspicions were aroused by the details requested.

onetrack
2nd Sep 2013, 15:38
Many scammers simply cut and paste whole sections of legit websites into their scam emails, thus the initial, almost convincing appearance of the wording.

However, you should be aware that very few companies will email you directly, and if they do, they address you by your name.
In addition, no company ever demands important personal details in an email. It's a dead giveaway.

ExXB
2nd Sep 2013, 17:24
I had one today 'from' Amazon, with a link to a page that was identical to Amazon's log-in page. Of course it wasn't really an Amazon page, they just wanted my login and password.

I forwarded it, as an attachment, to [email protected] and was surprised to see that Amazon wasn't interested. Got an immediate reply suggesting That if I wanted to report Spam I should go to a certain page on their website. Of course there was no way to report SPAM on that page or anywhere else on Amazon.

I'm disappointed, they should be much more diligent. I'll keep this in mind when I'm next looking to buy something from them.

Capetonian
2nd Sep 2013, 17:31
I got a very authentic looking one from Gumtree over the weekend asking me to authenticate my advert.

The only flaw was that I have never used Gumtree to place an advert and even if I had, it wouldn't have been from that account. And of course the link went to some bizarre website.

lomapaseo
2nd Sep 2013, 19:40
forwarded it, as an attachment, to [email protected] (abuse%40amazon.com) and was surprised to see that Amazon wasn't interested. Got an immediate reply suggesting That if I wanted to report Spam I should go to a certain page on their website. Of course there was no way to report SPAM on that page or anywhere else on Amazon.

I'm disappointed, they should be much more diligent. I'll keep this in mind when I'm next looking to buy something from them.

You were probably already hacked and the forwarded E-mail went to the bad guys instead.

P.Pilcher
3rd Sep 2013, 11:20
Like everyone else, I get loads of e-mails advising me that there is a problem with my bank account and would I please log in using the link conveniently provided to confirm my account details. Invariably I fiorward the entire e-mail to the appropriate bank's e-mail scams address and hear nothing more. Not the other day however - I received advice that there was a problem with my HSBC account (which I don't have) so I dilligently forwarded same to the appropriate address of the HongKong and Shanghai Banking Corporation. Almost by return I received an acknowledgement e-mail thanking me for my trouble and containing loads of the standard advice as to how to avoid getting scammed.

P.P.

Blues&twos
3rd Sep 2013, 20:18
The words "immediate action" and "permanently disabled" are also good indicators it's total bollocks.