2016 e-scams

The following email messages are examples of actual email phishing scams or attempts to deliver a virus via email. Most of these examples appear to have been sent by your Internet Service Provider (ISP).
 
You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar 
credit card or bank.
 
If you do receive one of the following emails or a similar email message 
in your inbox, please avoid opening any attachments and delete 
the email.

NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of the large amount of scam emails that are circulating.

12/11/16 Malicious Links

<http://maliciouslink.com/applications/cnbc.com/resources/img/editorial/2013/01/29/100417547-amazon-logo-on-ipad-gettyp.530x298.jpg?v=1361820315> Amazon Payments Customer Service

Dear Amazon Customer:

This email was sent by the Amazon server. your order has been suspended , because we are unable to verify your payment details please Verify that you entered your payment information correctly on your order You have successfully used the payment method on a previous order Part of your order has already charged and shipped successfully You have funds available in your bank or credit account to cover the order cost Please Update Your Payment Details in order for us to Proceed with your shipment Today To verify your Payment details, click on the link below. and follow the state procedure.

VIPRE Business Agent Anti-phishing removed a known bad URL from your email message. It was deleted or quarantined and replaced with this message.

Please fill in the required information.

NOTE: If we didn't Receive Your Payment Update Within 48 Hours Then we will Cancel Your Order Completely.

Thank you

Amazon Payments Management

An amazon Company Privacy Promise
Terms & Conditions
Copyright © 2016 Amazon.com, Inc. or its Affiliates
11/12/16 Malicious Links

From: Walmart Web Store 
Sent: Friday, October 21, 2016 7:18 AM
To: customer@yourdomain.com 
Subject: Notice: Re: Your Walmart Order is Ready - Caribou Coffee
 
Caribou Coffee, Your order is now complete. 
Your Order Invoice is available for download now.

Review Walmart Order Invoice Details >>Malicious Link

Shipping address: 1309 State Street
City: Your city
State: SD
 
Caribou Coffee, to cancel your order, provive customer service center order reference number.
Walmart Web Store

More than 50 years ago, Sam Walton started the tradition of hiring the best and brightest when he opened our first store in Rogers, Arkansas. And since 1962, we’ve been dedicated to helping people in our communities save money so they can live better.

11/11/16 Malicious Links

From: Mail Delivery Subsystem [mailto:no-reply@mailerdaemon.com] 
Sent: Tuesday, November 15, 2016 7:08 PM
To: customer@yourdomain.net
Subject: Warning: could not send message for past 4 hours

    Transient Delivery Errors [ 212.7.205.187 ] Fri. 11 Nov 2016 04:30:24 GMT
Email: customer@yourdomain.com
More than 10 incoming messages could not be delivered since Nov. 11 2016 for customer@yourdomain.com

 Reconfigure & retrieve your messages: Mail Settings (link opens page designed to capture your email address and password)

Warning: Fix error to avoid email account malfunction.
      
Remote HOST said: 550 sorry, cant deliver messages to your INBOX.

Update Agenda Mail settings (another link to capture your email address and password)

Microsoft respects your privacy. Please read our online Privacy Statement.
Microsoft Corporation. One Microsoft Way, Redmond, WA 98052

When you click the links in this message it opens the following page and asks for your email credentials:

An error in your SMTP/POP settings is blocking your incoming emails……

Message:     Date:    Wed Nov 16 2016 08:27:36 GMT-0700 (Mountain Standard Time)
                 Subject:  Error loading some of your inbox messages
                 User:    %0%
Bounce reason:     An error in your SMTP/POP settings is blocking your incoming e-mails
                 550-5.1.1 :POP configuration text can not be verified
                 550-5.1.2:Login encountered an unhandled error in your SSL settings 
                 550-5.1.3:Login encountered an unhandled error in your SSL settings
Suggested 
Solution:     Please fill out the form below. Once the error is fixed, our team will contact you.
                 Email address:    customer@yourdomain.net
                 Password:    
                 Submit report (button to send your credentials to spammer)  
 
Your e-mail may be completely blocked, if you do not report this error.

5/28/16 Malicious Links
 
 
From: Login technical support notification [mailto:customer@yadtel.net] 
Sent: Saturday, May 28, 2016 10:07 AM
Subject: Email Login Admin Alert
Importance: Low
 
Your Service Provider Cooperative, Inc.
 
We are having some technical Problem on Our Incoming Server And Outgoing Server To All Our Customer’s Web-mail User Which Requires Urgent Service Support; We Are Setting New Standards For Efficient And Effective Services To All Our Customers, To Complete This Process And Secure Your Mailbox Account, Please Login Your E-Mail Account For Service & Maintenance.
 
Click Here to Login Your E-mail Account for Service & Maintenance OR Copy this Link to your browser: http://yourdomain-net-loginhelpdesk.sitey.me/ << malicious link
 
We apologize for any inconvenience caused due to this Maintenance
 
Your Service Provider Web-mail Support Team.
 

5/21/16 Malicious Links
 
Subject: YOUR DELIVERY: customer@yourisp.net
Date: 05/21/2016 9:37 am
 From: "Glorria 05/21/2016" <support@maliciousdomain.com>
To: customer@yourisp.net
Reply-To: admin@maliciousdomain.com
 
Delivery of your cash system
needs to be confirmed...
 
Click the link below to confirm:
http://maliciouslink
 
Warm Regards,
Gloria
 
Here is That link again:
http://maliciouslink
 
If you want to lose your competitive advantage in the marketplace by no longer receiving these valuable messages packed with useful tips, tricks and resources on how to be a successful internet network marketer.
 
(Keep in mind, you will lose acc'ess to ALL upcoming emails and bonuses forever.)
 
As a valued subscriber I will send you
only gifts, valuable information and only promote products which I believe will make you a more successful Internet Marketer.
 
You may unsubscribe at any time using the link at the end of this email but are no longer entitled to any of the benefits above.
http://maliciouslink
 

5/24/16 Malicious PDF attachment
 
From: Marsh.Certificate@maliciousdomain.com [mailto:Marsh.Certificate@maliciousdomain.com]
Sent: Tuesday, May 24, 2016 9:31 AM
To: customer@yourdomain.net
Subject: ISP name Certificate
 
Reply To : FtLauderdale.CertRequest@maliciousdomain.com
 
PLEASE DO NOT REPLY TO THIS EMAIL. USE THE REPLY-TO EMAIL ADDRESS INSTEAD.
 
THIS IS A POST-ONLY MAILING. MAIL SENT TO THIS ADDRESS CANNOT BE ANSWERED.

5/11/16 Ransomware attachment and link
 
 
 
 
 
 
 
 
 
Subject: company
From: Ryan Blanchard 
To: customer@yourdomain.com
Date: Wed 12:38
 
· company _AA07E0.zip <malicious attachment
 
To protect your privacy, remote images are blocked in this message. Display images <malicious link

hello (customer username)

Attached please find the company report for your review

 

Thank you.

Regards,
Ryan Blanchard

 

 

 

 

 
 
 
 

5/11/16 Ransomware attachment and link
 
Subject: other names
From: Henrietta Calhoun 
To: customer@yourdomain.com
Date: Wed 12:09
 
· other names _9E764D.zip <malicious attachment
 
To protect your privacy, remote images are blocked in this message. Display images <malicious link
 
hello (customer username)
 
Attached please find the other names report for your review
 
Thank you.
 
Regards,
Henrietta Calhoun

3/16/16 Phishing Scam
 
Your ISP High Speed Internet Residential Application Login Service
 
 LOGIN TECH SUPPORT
 
 
We are still having difficulties in Resolving the Problem in our Incoming Server and Outgoing Server this Month February, to this effect your Mailbox Account needs Urgent Support: we are setting new standards for efficient and effective services to all our customers, to complete this Upgrading Process and Secure your Mailbox Account, Please Login your E-Mail Account for Service & Maintenance.
 
 
Click Here to Login Your E-mail Account for Service & Maintenance OR copy this link to your browser to login http://maliciouslink.me/
Tech Support Team.

2/16/16 Phishing
 
From: helpdesk@yourisp.net 
Sent: Tuesday, February 16, 2016 6:38 PM
To: helpdesk@yourisp.net
Subject: Email Upgrading Support
 
Your Service Provider Cooperative
 
Email Upgrading Support
 
Servicing central South Dakota with high quality phone, wireless Internet, Digital TV, We are Setting New Standards for efficient and effective services, To Complete This Process and Secure Your Mailbox Account, Please Login Your E-mail Account for Service Maintenance and Upgrading.
 
Click Here to Login Your E-mail Account for Service Maintenance OR Copy This Link to Your Browser: http://yourserviceprovider-netmailboxmainten.jimdo.com/
 
© 2016 Your Service Provider Cooperative, Inc