I got a not so lame phishing mail...

[Claes Gefvenberg]

Getting it via Gmail is a dead give away, of course, but this spam/scam was a little too well done for my liking:

Yesterday I opened an innocent looking mail and found that I ought to update Skype in order to be able to use the new group discussion gadget as intended. It did not look all that bad, as the culprits had used material from the Skype website, and even kept some of the original links to make it more credible. Some of the links (You know: Click here to update Skype) were aimed at decidedly unhealthy sites, however, and getting Skype update requests from hello5(a)emails(dot)skype(dot)com? Hello...? No, I don't think so.

As for the Nigeria letters we make so much fun of, they appear not to be so funny at all: A rumour (I don't know how credible it is, but it seems very likely) claims that they are used by Boko Haram among other miscreants to finance their terrorism.

 

[Marc]

My rule of thumb is when I get an "Update" email I go to the web site and see what is said there. I don't know about Skype because I *very* rarely use it, but most applications have an official web site. I always assume that anything through email is dangerous.

 

[Claes Gefvenberg]

I always assume that anything through email is dangerous.

Same here... With good reason.

 

[Wes Bucey]

The problem is NOT with relatively sophisticated internet denizens (like most Cove readers), but with those folks who spend hours looking at cute kittens and "stupid tricks" - when they get an email from a spoofed or slightly corrupted email address, they don't bother to look at the whole address - they immediately click on "view this!"

Most recently, "spearphishing" has hit the news as a result of the flap over Chinese military apparently targeting only 20 US Steel executives with a spoofed email apparently from their CEO, directing them to click on a link to a bogus website which infected their computers with a Trojan that allowed outsiders the same access to the US Steel network as each of the targeted executives had.

Many corporate drones would not think twice before clicking on a link in an email apparently from the top boss. Would any of us look askance at an email from our boss that began "Hey Bob (your own first name), take a look at this - is it something we could use?"

 

[kgott]

Don't wish to derail the thread but in a smilar vein, I have seen on one forum I visit that someone get a message on their screen saying their data has been encrypted and in order to get it un-encrypted the owner must pay xyz amount of money. The details of how to pay were given. If they did not pay the money in the given time their data would self erase.

In recent days I saw one such thread where the victim was told they have to pay in bitcoin.

 

[True Position]

Cryptolocker

That virus/trojan is known as Cryptolocker. The 'self erase' doesn't actually happen, if you don't pay a new 'higher fee option' becomes available. The delay/difficulty of obtaining Bitcoin probably plays into this. Maybe next we'll see the ransom request in Dogecoin.

https://vine.co/v/MazLbHTTWKd

 

[Marc]

Re: Cryptolocker

Yes - Also see http://arstechnica.com/search/?query=Cryptolocker

Cryptolocker

A few good articles on it. It's not new, but it's making a resurgence.

 

[Wes Bucey]

Here is the text of my most recent laughable phishing email (after a flurry of really poorly worded ones):

Sometimes i do wonder if you are really,really with your senses,how could you keep trusting people and at the end you will loose your hard earned money,or are you being deceived by their big names? They impersonate on many offices,claiming to be Governors,Directors/Chairmen of one Office or the other.

Their game plan is only just to extort your hard earned money. Now,the question is how long will you continue to be deceived? Sometimes,they will issue you fake check,fake ATM card,introduce you to fake diplomatic delivery,UN-existing on-line banking and they will also fake wire transfer of Your fund with Payment Stop Order.

Anyways,by the virtue of my position,i have been following this transaction from inception and all your efforts towards realizing the fund. More often than not,i sit down and laugh at your ignorance and that of those who claim they are assisting you,it is very unfortunate that at the end you loose. Although,i don't blame you because you are not here in Nigeria to witness the processing of your payment in Nigeria.The problem here is that you've never been told the whole truth about this transaction and it is because of this truth they decided to extort you.

The most annoying part is even fraudsters have really taken advantage of this opportunity to enrich themselves at your expense, those you feel are assisting or working for you are your main problems.

I know the truth surrounding this payment and i am the only person who will deliver you from this long suffering if you will abide by my advice.

Please i beseech you to stop pursuit of shadows and being deceived.Feel free to contact me immediately you receive this mail so that i can explain to you the modus-operandi guiding the release of your Payment. Do not panic be rest assured that this arrangement will be guided by your embassy here in Nigeria.

N/B: You are urgently requested to provide me with the following information.

*Full Name:...
*Address:.....
*Sex:.........
*Telephone:...
*Country:.....

Other details concerning this payment would be made known to you upon receiving feedback from you.

Best Regard

Dr. Fredrick Martin
DIRECTOR DEBT MANAGEMENT OFFICE (CBN)
​

So, I guess that since the "Dr." assures me my own US embassy will save my bacon,

Do not panic be rest assured that this arrangement will be guided by your embassy here in Nigeria.

I should probably just ignore all the other red flags of poor spelling, poor grammar, etc. and send him what he asks for. I guess he probably does

More often than not,i sit down and laugh at your ignorance

 

[Wes Bucey]

This is a new take for me on phishing

So, today's email brought this:

"My Beloved,

My Name is Sr. Tiago De Guerreiro from Portugal and I have been diagnosed with cancer. It has defiled all forms of medical treatment, and right now I have only about a few months to live, according to medical experts. I have not particularly lived my life so well, as I never really cared for anyone (not even myself) but my business. Though I am very rich, I was never generous, I was always hostile to people and only focused on my business as that was the only thing I cared for. But now I regret all this as I now know that there is more to life than just wanting to have or make all the money in the world.

I believe when God gives me a second chance to come to this world I would live my life a different way from how I have lived it. I would want to have a Personal and Trustworthy Relationship with you, as I intend and willing to empower the change of ownership for the transfer of my Deposits to your personal possession for further Investment and Charity Disbursement to the Less Privilege and Homeless. I will send you the photos of me and my very hopeless and selfish family members, including my wife, who I learn is getting married to my personal friend and attorney,Thank you for your due consideration. God be with you. You can reach me through my private email address: ([email protected])


Yours Brother.
Sr. Tiago De Guerreiro"

​

So - would you send this person your banking details? Portuguese is one of the few European languages I have never had experience with, let alone know anyone in Portugal. How do you suppose this dear person singled me out [along with hundreds or thousands of others] to administer his funds? Do you suppose it is due to all the altruistic advice I deliver here in the Cove?

 

[PaulJSmith]

Re: This is a new take for me on phishing

Do you suppose it is due to all the altruistic advice I deliver here in the Cove?

That must be it, Wes. The internet has made you an internationally renown purveyor of altruisms.

You're huge in Portugal.

Seriously, I do enjoy reading these endless variations on the same theme. I suppose someone is falling for it, else they'd have stopped long ago.