July 2012 - Posts

Fake IRS emails

I have seen two, one pretending to be from alerts@irs.gov, the other pretending to be from noreply@irs.gov.  They are, of course, fake, which is obvious when you hover over the hyperlinks.

image

 

image

Fake US Airways reservation email

image

 

Text:

You have to check in from 24 hours and up to 60 minutes before your flight (2 hours if you're flying internationally). After that, all you need to do is print your boarding pass and go to the gate.

Confirmation code: 032421
Check-in online: Online reservation details

 

Flight
5352

Departure city and time
Washington, DC (DCA) 10:00PM
Depart date: 7/26/2012

 
     


 

As always, if you hover over the hyperlink, it becomes obvious that the email is fake.

Fake AICPA emails

image

 

As always, hover over the link and it’s obviously fake.  The text of the message is:

Dear accountant officer,

We have been informed of your alleged assistance in income tax refund infringement  for one of your employers. According to AICPA Bylaw Section 765 your Certified Public Accountant status can be cancelled in case of the aiding of submitting of a misguided or fraudulent tax return on the member's or a client's behalf.

Please familiarize yourself with the notification below and respond to it within 7 days. The failure to respond within this time-frame will result in termination of your Accountant license.”

Go to the website and you will be hit with the Help Center URL Validation Vulnerability described here.

image

What on earth is going on at the Sophos blog?

Picture says it all, really.

image

Posted by sandi with 2 comment(s)
Filed under:

Fake craigslist emails

image

 

 

As always, if you hover over the hyperlinks in the email it becomes obvious that the email is a fake.

Well done Sanyo (a great use of social media to get an urgent message out to the masses)

Seen on Facebook:

image

Clicking on the advertisement takes the viewer to http://www.sanyo.com.au/.  From there, we find a little down the page this - http://panasonic.net/sanyo/20120124/nr20120124au.pdf

The PDF contains this warning – you can understand the urgency:

"SANYO Oceania Pty. Ltd. (SANYO Oceania) has announced that some SANYO Convection Grill Microwave Ovens (EM-C8787B) sold in Target stores nationally may cause severe electric shock to the user during operation. This  is  due  to  some  of  the printed circuit boards within the internal control panel having electrical contact with the small buttons on the external control panel.

As the safety of customers is ‘the’ highest priority, SANYO Oceania would like to ask owners of the affected model to stop using their microwave ovens immediately and unplug the power cord. The company is also issuing a recall for all affected products, and delivering the message through a broad range of media organisations."

Posted by sandi with no comments
Filed under:

A worrying online scam…

image

 

Source: http://www.theage.com.au/digital-life/consumer-security/how-banks-fight-hackers-and-fraudsters-20120404-1wc0h.html

Even the most cautious amongst us would probably have been tricked if the target of such a sting…

“Just got done for $1000. We import goods from China / Hong Kong and have been doing so for 10 years. The Scamers hacked the email account of the company in HK and waited until we agreed to the deal. What they did then was very tricky, with 20mins of our acceptance of the deal, they copied the whole email (including all history) and emailed us under a new email that was the same as the companies email with one character changed. We then paid the money, it was three days later when i called the real company to confirm the IMT had cleared, that the problem came about. a quick ISDN search showed the email came from Nigeria, but the money paid to an account in China in the same city as the factory. What got us was how long had they been watching the emails, it only took them 20mins from the time i agreed to payment to the scamers sending the fake china bank account details (quicker then the real company replied). We are still waiting to hear back from Com Bank and Bank of China, but from the looks of it the money is gone either to the scamers or to the China Government under their anti-money lanundry act”

Here is an example of how easy it can be to fool somebody by fiddling with letters, numbers and fonts.  I am going to place a capital i next to a lower case L – can you tell the difference?  To fool you, all I have to do is change the font from Verdana I l to Arial I l

 

While we’re on the topic of crashing web browsers…

Nearly. Every. Time. I. Close. Chrome…  Yes, I’ve done the researching, and the attempted fixing, and uninstalling/trashing data/reinstalling etc etc etc… if it were Internet Explorer I was having trouble with I’d probably get it fixed in short order…

SNAGHTML15a49e33

 

SNAGHTML15a4d173

Posted by sandi with 2 comment(s)

Installing updates for the Microsoft .NET Framework 4 can take longer than expected in some scenarios

.NET Framework 4 related updates have led to the loss of far too much valuable time for me in recent days – I am very grateful to Susan Bradley for the heads up.

Installing updates for the Microsoft .NET Framework 4 can take longer than expected in some scenarios
http://support.microsoft.com/kb/2570538

Posted by sandi with 1 comment(s)
Filed under:

Fake Ameritrade email

image

 

 

As always, if you hover over the hyperlinks, they’re obviously not what they should be…

Fake American Airlines email

image

 

Interesting to see that the phishing email has links pointing to “jafratravel.net” but coincidental.  Other AA spam emails have been seen with *.cn URLs and whatnot.