Showing posts with label phishing. Show all posts
Showing posts with label phishing. Show all posts

Wednesday, 10 June 2009

Google Awards Centre

Here's a nasty one which comes with a gobbledegook code. "London, United Kingdom?" and "Great British Pounds"?

Google 10th Anniversary Awards Centre
London W1U 4RY, United Kingdom.

We are pleased to inform you that your email address has won an Award in the Google 10 Years Anniversary Awards as organized held this year 2009 in London, United Kingdom.Google Inc. randomly selected 15 email addresses through a computer ballot system to receive an award of Five Hundred Thousand Great British Pounds (500,000.00 Pounds) each as a part of their for-profit philanthropic wing (GOOGLE.ORG)promotion. Awards MUST be claimed by the email owner ONLY,not later than 3 weeks from the day of notification and your complete personal information as requested below with your Award Reference Code and File Number to the verification department to enable them
process your claim;

Award Reference code: GOOGLE568A2009/ File number: G245.

Full name,Country,Contact Address,Telephone/Fax no,Marital
Status,Occupation,Sex,Age

Mr.Frederick Brown
E-Mail: @googlemail.com
Tele :

Sincerely Yours,
Google Management.

Sunday, 19 April 2009

Email Phishing

This one is spam. Note they put the sense of urgency by asking you to reply within 72 hours. Any web hosting company would never ask for your password.


Dear EIRCOM.NET web-mail User,

Due to spam complaints of email users in our web-mail system, our investigation shows that your email address is compromised and is used to send out spam message
in our web-mail system. As a result, your User name will be disabled if you do
not send us the required information within 72hrs.

Information Required:
Your Full Names:
Email address:
Password:
Retype Password:

Thank you for using the internet service
Eircom.net Webmail Technical Informations Department

NB: We request your username and password for Identification purpose only.

Tuesday, 3 February 2009

Never email your password

Never send anyone your password and be very careful giving out your address.
Note they add an air of urgency by saying to respond immediately. Like before you put your brain into gear. Spot the one unfortunate misspelling.

Dear Webmail Subscriber,

This message is from Webmail messaging center to all email account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused email account to create more space for new accounts.

To prevent your account from closing you will have to update it below so that we will know that it's a present used account.

To complete your Webmail account, you must reply to this email immediately and enter your Name ( )
Username: ( )
password ( )
Contact address: ( )

You can also confirm your email address by logging into your Webmail account

Failure to do this will immediately render your email address deactivated from our database.

Warning!!! Account owner that refuses to update his or her account within Seven days of eceiving this warning will lose his or her account permanently.

Warning Code:VX2G99AAJ
Thanks,
Webmail Support Team

Sunday, 18 January 2009

Here's a clever one - northwest airlines

This was caught by my gmail spamcatcher but I clicked on it by accident

Hello!

Thank you for using our new service "Buy Northwest Airlines ticket Online" on our website.
Your account has been created:

Your login:
Your password: pass71TT

Your credit card has been charged for $428.75.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the Northwest Airlines ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!

Kind regards,
Karyn Riggs
Northwest Airlines

Monday, 7 July 2008

This is a quite a good one. Many people travel and connect warily to their bank while away. I admire the touch of the 'do not reply to this email.' The web address however is nothing to do with Lloyds. Ignore and delete.

"Dear

We recently noticed one or more attempts to log in to your Lloyds Internet Banking account from a different IP address.
If you recently accessed your account while traveling, the unusual log in
attempts may have been initiated by you. However, if you did not initiate
the log ins, please visit Lloyds Online as soon as possible to check-up your
account information:

Thanks for your patience.
Sincerely,
Lloyds Centre.
----------------------------------------------------------------
Please do not reply to this e-mail. Mail sent to this address cannot be answered."

Monday, 17 March 2008

Rather clever from 'Halifax' bank

It virtually cut and paste from a real screen. So why go to all that trouble and spell the subject wrong? And I don't think any UK bank would use the adverb 'kindly.'
Also check out bad grammar and the 'May 2008' reference.

Subject: * IMPORTANT * Your Online Banking Has Been Temproary Locked

Dear Customer We're making improvements to the online service to make your online banking experience even better!

Due to the ongoing improvements, we kindly ask you to update your online banking details by clicking this link (the dodgy link) to start updating your accont.
Click the 'link' below CLICK HERE TO UPDATE YOUR ACCOUNT .
Enter your present username .
Enter your present password that which presently you are using to access your online service.
Fill in your present security question and click 'sign in' to continue.
Make Sure all Details you are filling are your present details which you are using to access your online banking.
Once you've set up your security details, you should also fill the other required informations which is on the next page and you will be able to use the service straight away.
If you've forgotten your username or lost your password, you can easily reset them by clicking on the 'Forgotten your sign in details or is your access suspended?' link on the sign in page. If you need further help, you can call our helpdesk any time day or night on 08456 02 00 00 and one of our advisers will be happy to assist you.
Best wishes
Mark Banks
Head of Online

Calls from BT landlines will cost a maximum of 4p per minute. The price of calls from other telephone companies will vary. The call price is correct at May 2008.

Sunday, 4 November 2007

Natwest scam

Very well spelled phishing scam but check the link. It takes you to a .li site. Which country is this? Not the UK anyway.

Dear National Westminster Bank (NatWest Bank) customer,

We regularly perform scheduled maintenance for our OnLine Banking customers. We intend upgrading our OnLine Banking security server for better online services.

In order to ensure you do not experience service interruption, you are required to complete our OnLine Banking Customer Form by following the secured hyperlink below:

http://www.natwest.com/otherstuff

Thank you for banking with National Westminster Bank, the industry leader in safe and secure online banking.

National Westminster Bank Customer Service

-------------------------------------

National Westminster Bank © 2007

Sunday, 21 October 2007

Tax refund scam

Here's an interesting one purporting to come for the UK government but the link directs you to Hungary. The grammar and spelling are lax too.

Dear UK resident:
This is a email to inform you that HM Treasury calculated your tax payments in the last 2 years in UK.The amout is :

£2419.13

HM Treasury ensure that you can claim the maximum amount of your refund.The next review will be made in the next 2 years .You can apply for the refund in maximum 10 working days.Thank you .HM Treasury.


Apply by clicking here
HM Treasury

Monday, 15 October 2007

New Phishing scam

Usual tells. Note bad grammar and huge sums of money. Avoid.

FROM: Patrick Chan.
Hang Seng Bank Ltd,
Hong Kong.
e-mail: patrickwkchan_015@wellknown mailserver

Good Day,
I have a Business Proposal of (Twenty Four million Five Hundred Thousand United State Dollars only) for you to handle with me from my bank.I will need you to help me in transferring the above funds from Hong Kong to your country. I need to know if you will be able to handle this with me before I explain to you in details.

Should you be interested please send me your: 1,Full names, 2,private phone number,3,current residential address.

finally after that I shall furnish you with more informations about this project.However I shall be waiting your response and assurance.

Kind Regards,
Patrick Chan.

Monday, 10 September 2007

Dormant Account Nigerian Spam

The clever thing with this phishing spam is that it is asking you to join them in something illegal so you would be less likely to go to the authorities. No country is mentioned. Bad spelling too. Avoid.

Hello Dear,

Do accept my sincere apologies if my mail does not meet your personal ethics. I will introduce myself as Mr. Sandler, Director of Foreign Operations of a well-known bank here in the United Kingdom. One of our accounts with holding balance of 15 M (Fifteen Million British Pounds) has been dormant and has not been operated for the past 4 years.

From my investigations and confirmations, the owner of this account a foreigner by name Gerald Stone died in 4th of January 2002 and since then nobody has done anything as regards the claiming of this money because he has no family members who are aware of the existence of neither
the account nor the funds. Also Information from the National Immigration states that he was also single on entry into the UK.

I have secretly discussed this matter with some of the bank officials and we have agreed to find a reliable foreign partner to deal with. We thus propose to do business with you, standing in as the next of kin of these funds from the deceased and funds released to you after due processes have been followed.
BELLOW IS THE REQUIRED INFORMATIONS YOU WILL SEND TO MY
SECRETARY.

(1) YOUR FULL NAMES
(2) YOUR HOUSE ADDRESS
(3) YOUR DIRECT CELPHONE NUMBER AND HOUSE PHONE WITH FAX IF ANY.
This transaction is totally free of risk and troubles as the fund is a legitimate and does not originate from drug, money laundry, terrorism or any other illegal act. On your interest, let me hear from you.

You are advised to call the under sign on the direct TEL: +447024030692.
Regards,
Mr.Sandler.

Another Lottery scam

This one from Holland. Avoid.

AWARD WON PRIZE NOTIFICATION
Ref Number: NL/331/027
Batch Number: NL-476-809
DRAWS FOR CATEGORY “A”
Website: www.powerball.com

Dear Lucky Winner,

Congratulations to you as we bring to your notice, the results of the second Category POWERBALL LOTTERY DRAW, the draws were officially released on the 8th of September, 2007.

Your email ID was selected by Electronic Random Selection System (ERSS) from the internet around the world, your e-mail with the following: Ticket Number: 4416273 with serial Number: 00510423 drew lucky Number: 9-13-24-27-30-38 as your address emerged as one of the 10 winners in the category "A"

The Free Lotto Awards is organized to encourage the use of the internet and promote computer literacy worldwide as part of our International Promotions Program, so therefore no ticket was sold. You as well as the other winner are therefore to receive a cheque prize of $450,000.00 (FOUR HUNDRED & FIFTY THOUSAND DOLLARS ONLY) each from the total payout of $4,500, 000.00.

Your prize awards issuance CHEQUE will be issued to you upon endorsement of the WINNERS CERTIFICATE & ALL OFFICIAL DOCUMENTS relating to your won prize as a precautionary measure to ensure that payment are been paid to the rightful winner.

Please contact our accredited processing agency (VESTING FINANCE AGENCY) on the following contact details below: Pls note, as all unclaimed prize are nullified and cancelled after 10 days from the date of this notice:

**************************************************************************************************
Contact person: Mr. Marcel Houten.
Tel: +31-642-874-665
Fax: +31-847-560-407
Email: vesfinance@wellknown mailserver
**************************************************************************************************
As part of our security measure in your best interest to avoid mix up of numbers and names of any kind, we request that you keep the entire details of your award strictly from public notice until the processing of your claims has been completed preventing people applying for your winning fund as we have had cases like this before, because no ticket was sold.

Yours Sincerely,
Mrs. Julian De Vaart.
(Lottery Coordinator).

**************************************************************************************************
NOTE: Do not respond back to this email address, do make contact with your claim agent on the above given email address
**************************************************************************************************

Lottery Scam emails

Another lottery scam email. Note they try and get around the inevitable question of 'why me when I didn't buy a ticket?' by saying it's PR and the address was given by microsoft. I bet microsoft would be surprised to read that. They start phishing low key. Why do they need to know your occupation? And they have the nerve to say the co-ordinator has a knighthood!

"BRITISH NATIONAL LOTTERY HEADQUARTERS:
28 TAN FIELD ROAD,
CROYDON, LONDON.
CUSTOMER SERVICE
Ref: UK/9420X2/68

Dear Selected Winner,
We are pleased to inform you of the final announcement of the
UK National Lottery Online Promo Programme held on the 31st of August, 2007.
We have been sending this notice to you but this is the last as we are about distributing winnings to winners.
The draw was done electronically with several email addresses provided
to this office by microsoft to enhance the utilization of the internet.

Your email address was attached to Reference Number UK/9420X2/68 and was
picked as one of the ten winning email addresses.
This has qualified you to claim the total cash prize Of £753,437(Seven
Hundred and Fifty Three Thousand, Four Hundred and Thirty Seven Pound Sterling) in cash
credited to file KTU/9023118308/03.

This is from a total cash prize of £7,534,370.00 shared amongst the first ten (10) lucky winners in this category B.
Your winnings will be issued to you as soon as our claims
department verify your winning after you might have filled the payment
processing form below.


Payment Processing Form for filing of claims.

1.Name in full.
2.Address in full.
3.Age.
4.Phone No.
5.Occupation
6.Winning Email Address

This will enable us process your payment processing form. You are advised to contact
our claims department via these details:

ASSIGNED CLAIMS AGENT:Neville Paul.
EMAIL:neville4paul@wellknown mailserver
TEL.: :+44 704 570 7811.

Quote Your Reference Number as UK/9420X2/68 when
you are filing your claims.

Yours Faithfully,
Sir Steven Smith
Online Co-ordinator"

Sunday, 9 September 2007

another phishing job offer email scam

Same as before. Who are these people? Why are they emailing you? Why can't they spell if they are located in United Kingdom (sic)?

International corporation is looking for talented people. No investment reqired.

Hello,
First and foremost, we would kindly like to express our deep greetings to you and your relatives and hope you all good health and happiness and more success in dealing. Our International Corporation is looking for new employees on various vacancies. We are by now for a long time in the market and now we employ human resources to work from home.

Our Company Head Office is located in United Kingdom with branches all over the world. Our supreme desire now is to enlarge our business scale to more countries, so we are advertising here in hope of cooperating with you all. We be grateful for sincere and ingenious employers. You do not need to invest any sum of money and we do not ask you to provide us with your bank account requisites! We are occupied in totally officially authorized activity and working in our corporation you can achieve career growth at a permanent job.

We are seeking a highly motivated professional, with skill of working with people. The position is home-based. We offer a part-time position with flexible working hours. And we would be happy to consider a full-time job share candidate.

The right person will have good communication and interpersonal skills and some knowledge of advertising. Candidates must be able to keep on focused and motivated when working alone.

Thank you and we are looking forward to cooperate in long term base with you all.
If you are interested in our vacancies, please feel free to contact us for further information.
The preference is given to people with knowledge of foreign languages. If you are interested please send next information to: KayHodgeZT@wellknown mailserver
1) Full name
2) Contact phone numbers
3) Languages
4) Part time job/Full time

We are looking forward to hearing from you soon.

Best Regards,
elmo burne

job phishing scam

Here's a phishing scam in the form of a job offer. They want your personal details, eventually your banking details so they will rip you off. There is no job. Why would a company who you have never heard of, to whom you have never applied for a job, send you a speculative email? Note the mode of payment mentioned. This should always set off a warning light. Interestingly, it comes from a German based mailserver.
Again the golden rule, if it seems to good to be true, it is.

Hisense Import & Export Company. Ltd
Hisense Malaysia Bhd Sdn
No.45, Tengkat Tong Shin,
Bukit Bintang,50200
Kuala Lumpur, Malaysia.

Dear Friend,


I represent Hisense Import & Export Co., Ltd based in Malaysia with
Headquarters in china, and we have a marketing quota for the year to
meet,for this we are recruiting representatives who can help us
establish a
medium of getting to our customers in Europe and North America as well
as making payments through you as our payment officer. It is upon this
note that we seek your assistance to stand as our representative in
your country.

We have set a marketing quota for this year. For this reason we are
recruiting representatives who can help us establish a medium of
getting
to our customers in Europe and America. we are interested in employing
your services to work with us as a private payment agent that can help
us establish a means of receiving payment for goods that was supplied
to
our customers in your location, as the company is already experiencing
difficulties in receiving payments from them.Most of our customers pay
out in cheques,credit card and money orders and we do not have an
account in your country that will clear this money.It is upon this
note
that we seek your assistance to stand in as our representative in your
country.

MODE OF PAYMENT.
It is important to let you know that, as our representative, you will
receive 10% as commission on whatever amount you receive on the
company's behalf. And you will be paid $3,000 United stated dollars
monthly for
your services which would amounts to $36,000
USD annually as our representative.if you work diligently with
instructions and guidelines, your Monthly and Annual income will
increase with
25% increase.

Please if you are interested in working with us in good faith and
honesty, send your information in the below form
to:email:hiseense@well known mailserver, with the basic requirements provided
underneath to commence
registration processes:

(1) Your Full Name ......................
(2)Contact Address .....................
(3) Phone Number ........................
(4) Fax Number ..........................
(5) Age...................................
(6) Sex...................................
(7)Occupation.............................
(8)Nationality............................
(9)Company................................
(10)Work Experience.......................

Thank you for your time. Please forward to us completed details through
the email: hiseense@well known mailserver,

Warm Regards,

Mr. F Hashim
Hisense Import & Export Co., Ltd
Freight Fwdg. Svcs.
Hisence Company Plc

Thursday, 6 September 2007

Wang HongZhang.phishing scam

Avoid this one. It comes from a hotmail account. I'll report it to abuse@hotmail.com and see if they nix the account. I reported a fraudulent yahoo account yesterday and they replied that they had taken action, though they're not allowed to say exactly what action.

FROM: Wang HongZhang.
I am Mr. Wang HongZhang, Chief Disciplinary Officer, Peoples Bank of China (PBC), Beijing. I have an obscured business proposal of US$24.5million for you.
Please get back at me if you are interested.
Email:hongzhangwang002@well known mailserver
Your earliest response to this letter will be appreciated.
Kind regards,
WANG HONGZHANG

Tuesday, 4 September 2007

Ebay scam email

Many people have an ebay account, an ebay life. These are aimed at you, to make you panic into clicking a link in an email and entering personal information. Don't do it. Where does the link point? Not to ebay, despite what the text says. If you are worried, type ebay.com directly as a web address and continue from there.

Please Pay Your eBay Fees Account Today

We are writing to alert you that your monthly eBay fees account have not been paid because credit/debit card declined ebay's attempt to automatically deduct the amount due. This require you to update billing information as soon as possible. This billing update is also a new eBay security statement which goes according to the established norms on the eBay User Agreement. Please be advised that your eBay fees of $12,50 are now due. These fees result from listing item on eBay, purchasing item on eBay or using related services (ID verify, Stores, etc). Also, this is a courtesy reminder that the following credit/debit card on file for your eBay account will expire soon.
Please pay your eBay fees records on or before September 5, 2007. A failure to update your records may result on a suspension of your account.

To update your eBay records click on the following link:
https://signin.ebay.com/aw-cgi/eBayISAPI.dll?SignIn&ssPageName=h

If, after reviewing your account information, you seek further clarification regarding your account access, please contact eBay by visiting the Help Center and clicking "Contact Us". This new security statement will helps us continue to offer eBay as a secure and cost-effective service.

As a reminder, past due accounts may be restricted from buying or selling until payment received. We appreciate your cooperation and assistance.

Sincerely,

www.ebay.com

Thank you,
eBay Inc
This administrative email was sent and originally from eBay, based on your account at www.ebay.com.

As outlined in our User Agreement, eBay will periodically send you information about site changes & enhancements. Visit our Privacy Policy and User Agreement if you have any questions.

eBay will request personal data (password, credit card/bank numbers) in an email.
Learn More.

Copyright 2007 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are trademarks of eBay Inc.
eBay is located at 2145 Hamilton Avenue, San Jose, CA 95125.

Sunday, 2 September 2007

Halifax banking. account maintenance and verification

Again with the spelling (submiting) and clumsy grammar. I presume the Halifax has clearer technical writers than this.
If you have concerns about your banking details, always log directly onto the normal baking website. Never follow a link from an email.


Dear Halifax customer,

During our regularly scheduled account maintenance and verification procedures, we have detected a slight error in your billing information.

This might be due to either of the following reasons:

1. A recent change in your personal information (i.e.change of address).
2. Submiting invalid information during the initial sign up process.
3. The online services look that was changed recently

Please update and verify your information by clicking the link below:

link

If your account information is not updated within 48 hours then your ability to access your account will become restricted.

Thank you

Halifax Plc

Your Account is about to expire scam email

This is designed to worry people that their online banking account won't work unless they follow the link. Throwing intechnical jargon is used to throw untechnical customers into a tizzy. Your online account work if the scammers take all your money.
Note the bad punctuation.


Lloyds TSB
Personal & business account
Online Service alert
Please note that Your Lloyds TSB Online Service Account is about to expire.Due to SSL Database upgrade on our system In order for it to remain active,follow the link below to
proceed and access your account.

link

Another banking spam email from NatWest

This has a good looking NatWest header and Important Information in large friendly letters. Includes links to the NatWest website security information amongst others and the crucial ACCESS YOUR ACCOUNT button which points to the scammers website.


Dear Value Client of NatWest,

we recently reviewed your account and suspect that your NatWest Account
may have been accessed be an unauthorized third party.
Procting the security of your account and of the NatWest
Bank network is out primary concern therefore,as a
preventative measure, we have temporarily limited access
to senstive NatWest Bank Account features.

click on below button in order to regain access to your account.



For more information about how to protect your account,
please visit NatWest Security center.
We apologize for any inconvenience this may cause you,
and apriciate your assistance in helping us maintain the integrity of the entire
Wamu System.

Thank you for your prompt attention to this matter


Sincerely,
The NatWest Security Department Team.


� 2007 Nat West, Inc. All Rights Reserved. Legal | Security | Privacy

Lloyds TSB online security check scam

Typical bank Phish email. Clever in that it has a 'Please do not reply to this email' and other official type language and refers to complaints received. It is designed to worry unsuspecting customers into checking their own security, by giving the bad guys their login and password. If you look at the link to where it says 'Please click here to start' it does not point to a Lloyds TSB website. It's that simple.
Note the bad grammar again.


Dear Customer,

Lloyds TSB has been receiving complaints from our customers for unauthorised use of their Lloyds TSB Online access. As a result we are making an extra security check on all of our Customers account in order to protect their information from theft and fraud.
We're committed to protecting you when you bank with us. Our industry-standard levels of security ensure that you can always access your Lloyds TSB accounts online with confidence
To ensure you are always protected, we are introducing a new programme of security initiatives called BankSecure. Over the next few months, you’ll see a number of initiatives that we'll put in place to make sure you stay secure and to help you protect your Internet banking information

Due to this, you are requested to follow the provided steps and confirm your Online Banking Access for the safety of your Accounts. Please Click Here To Start .

However, Failure to do so may result in temporary account suspension. Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.

Thanks for your co-operation.

Fraud Prevention Unit
Legal Advisor
Lloyds TSB.

--------------------------------------------------------------------------------
Accounts Management As outlined in our User Agreement, Lloyds TSB (r) will
periodically send you information about site changes and enhancements.

Please do not reply to this e-mail. Mail sent to this address cannot be answered.