Elamb Cybersecurity

Tag: reporting email scams

  • Consumer fraud : Job-Opening-Shopper

    written by yuri

    I received an email containing the email below.

    Date:April 01, 2015

    Email: latoyya.myers2@chello.nl

    *Job  Descriptions: You Will be  Assigned to visit a shop
    You need to “pretend” to  be a normal potential customer who is looking for a particular service or product.
    You Will then finish an on-line questionnaire to Share with us your customer  experience.

    *Requirements:  17 Years old or above. Can speak local language well.
    Can  read and write English. No Experience needed Like Shopping.

    *Job Pay: You will get S200  for each.assignment. Most of the time you will only need to Spend 20 minutes on the visit.

    Please  reply this-email with the correct information  below to sign up;consumer-fraud

    Full Name:
    Address:

    City:
    State:
    Phone:

    We will contact_you immediately as your Application has been received.

    Thank You,

    LatoyyaMyers

  • Reporting mail fraud: Notice of appearance in Court #00000443455

    Reporting mail fraud: Notice of appearance in Court #00000443455

    If you receive this email, Do NOT open the attachment.

    Notice of Appearance in Court – email malware with attachment: Court_Notification_00000443455.zip

    DO NOT OPEN the Attachment!

    This attachment has the following malware:

    Antivirus Result Update
    AVware Malware.JS.Generic (JS) 20150405
    CAT-QuickHeal JS.Downloader.B 20150404
    Comodo Heur.Dual.Extensions 20150404
    ESET-NOD32 JS/TrojanDownloader.Nemucod.AF 20150404
    Fortinet JS/Nemucod.AF!tr 20150405
    Kaspersky Trojan-Downloader.JS.Agent.hdu 20150405
    McAfee JS/Downloader.gen.d 20150405
    McAfee-GW-Edition JS/Downloader.gen.d 20150404
    Microsoft TrojanDownloader:JS/Nemucod.P 20150405
    NANO-Antivirus Trojan.Script.Heuristic-js.iacgm 20150404
    Sophos Troj/JSDldr-AU 20150405
    VIPRE Malware.JS.Generic (JS) 20150405

     

    Dear UserName,

    This is to inform you to appear in the Court on the April 02 for your case hearing.
    Please, do not forget to bring all the documents related to the case.
    Note: If you do not come, the case will be heard in your absence.

    The copy of Court Notice is attached to this email.

    Sincerely,
    Alberto Crabtree,
    Court Secretary.

  • phishing scams: T-mobile smishing

    Phishing scams: T-mobile also called as Smishing

    written by yuri

    On march 20, 2015 at 10:58 am, I received a text message saying that I am “one lucky customer”.  The message was sent to many others from +(828)200-0119. I immediately clicked it.  The link took me to what looked like a T-mobile page asking me to log in with my phone number, password and last 4 digits of my social security number.

    I thought this was not unusual but it turns out that this was not a legit website.  After hitting log in, it did not sign me in.  It sent me the same text message again so I got a  little confused.  After a few minutes I realized something is seriously wrong.  I thought ”oh my god, this might not be a real website. phishing scamsSo i immediately asked my husband who is an IT guy.  He told me to never click on random links sent via email and never log in to any link that does not look real.  I was devastated knowing that I had almost put our T-mobile account at risk.  I did not know that these types of scams exist.

    We changed all my actual T-mobile account information.

    We did research on the actual t-mobile website on my laptop to check if there were people who had experienced the same thing. The site shared informations about “smishing” and where to report the incident if you think you got scammed. http://www.t-mobile.com/Company/PrivacyResources.aspx?tp=Abt_Tab_PhishingSMishing&tsp=Abt_Sub_IdentityTheft_SMiShing

    You can also report the spam to t-mobile support .https://support.t-mobile.com/docs/DOC-2747

    +(828)200-0119. This is the number of the sender. I searched it in google and found out it is from China .phishing scams

     

    “congratulations, you are one lucky customer getting credit applicable to your next month bill, for more detail vist https://tr.im/15585”

    If you get this message or something similar do NOT click the link.  If you do click the link and put in your information, you will need to go to your actual T-Mobile site and change all your password.  Contact T-Mobile and tell them what is going on.

  • Phishing scams International Monetary Fund IMF

    Phishing scams International Monetary Fund IMF submitted by User:

    This Phishing attempt is accompanied by attachment: “25299_IMF_Official”

    Which does not seem to have any macro malware according to VirusTotal

    From: info@armtechindia.com [mailto:info@armtechindia.com]
    Sent: Friday, March 20, 2015 2:46 AM
    To: rbi_transfer_departmnt@outlook.com
    Subject: Outstanding Depts (Released).
    Importance: High

     

     

    This message and any enclosures are intended only for the addressee. Please
    notify the sender by email if you are not the intended recipient. If you are
    not the intended recipient, you may not use, copy, disclose, or distribute this
    message or its contents or enclosures to any other person and any such actions
    may be unlawful. Ball reserves the right to monitor and review all messages
    and enclosures sent to or from this email address.

    Attempt to get information 25299_IMF_Official:

    The International Monetary Fund (IMF) has come to notice that you are among the unsettled Fund Transactions long time ago. The (IMF) have directed all individual/Organizations who for one reason or the other did not receive their Transaction Fund in their home of origin or bank account, Your Amount is now available with The Foreign Exchange Department Reserve Bank of India New Delhi.

    To channel your reports, please kindly send to us:

    1, Your Full Names:

    2, Sex:

    3, Date of Birth:

    4, Contact Mobile Numbers:

    5, Your Email address:

    6, Your Full House Address:

    And reconfirm us with your batch No.”2277’’ to the below Email ID: rbiforeignexchange@workmail.com

    Contact Persons: Mr. Michael Morrison

    Mrs. Pinto Mishra

    (Transfer Officer)

    Email: rbiforeignexchange@workmail.com

    Thanks

    Frank VIC

    IMF USA

  • Financial Scams : Capital One

    Beware: This is a financial scams that has been around for a while.

    Subject: FW: Account Alert: IMPORTANT Notification, Action Required

    An apparent fishing attempt…

    From: Capital One [mailto:CapitalOneRetailServices@ebusiness.partnercardservices.com]

    Subject: Account Alert: IMPORTANT Notification, Action Required

    financial-scams

    Account Alert: Service Validation.

    Dear Valued Holder,

    As requested, We’re writing to make sure you’re aware of a NEW change in security procedure for all account holders.Your profile and billing information needs to be validated.

    Kindly follow the ONE-TIME action below in order to opt with our recent security improvement. By passing back and forth private information that only you and us know, you can feel even more secure with your online access experience. We recognize you and you recognize us.

    ONE TIME ACTION: 
    To continue, we have sent you an attached HTML Web Page.

    See e-mail attachedweb page
    Download and save it
    Open the attached web page
    Get started by confirming your informations

    Sincerely,
    Online Customer Center.
    ACCOUNT RELATED QUESTIONS
    Do not reply to this message with Account-related questions. If you wish to submit a question, please contact us at capitalone.com/contactus.Capital One
    P.O. Box 5226
    Carol Stream, IL 60197-5226
    © 2014 Capital OnePrivacy and Security  |   Terms of Use and Link Policy