Archive

Archive for the ‘Daily phishing and email scams’ Category

How touching. Mrs. Madoff wants my help

June 11th, 2009 Chris Bailey No comments

Too funny not to share.

For those not familiar with Bernie Madoff perhaps not as funny.

At least we now know for certain that 419 scammers stay up to date on current events. LOL

Dear Friend ,

I am Mrs.Ruth Madoff, wife of bernard madoff.

I am actually going through some kind of difficult time with my family
right now, as my husband is at the Metropolitan Correctional Center, New
York City
.
My husband Sentencing is scheduled for June 16, 2009 and he is likely to
face a maximum sentence of 150 years in prison and $170 billion in
restitution, so there is need for me to move out a lot of my personal
funds and personal belongings around the world , particularly  from
outside America, but i need somebody to trust now, because i cannot
receive funds here in America right now.

I would need your help in acquiring some properties and keeping some large
cash amount for me. but first i would  prefer to chat with you either on
yahoo chat or Skype. if you are not comfortable with yahoo then write me
,so we can communicate via email.

This is very urgent, i would have to entrust a large amount of money into
your hands  and some personal valuables. But this would have to be very
confidential, just between me and you, because the press are after  me
and my husband name all over the headlines, because of his Wall street
business
.

Anyway! don’t be scared about the risk, it is a very safe deal i can
assure you of your confidentiality.

Yours Sincerely
Mrs. Ruth Alpern Madoff
Email Contact: ruthmadoff020@live.com

VN:F [1.9.3_1094]
Rating: 0.0/10 (0 votes cast)

Bank of America phishing scam

December 31st, 2008 Chris Bailey No comments

Recent Bank of America phishing scams.

Subject line(s):

  • Bank of America Alert Update Your Information

Linking to:

  • http://account-restore.com/sas/login-secure/index.htm
  • http://www.mkc-zupanja.com/forum/user/www.bankofamerica.com/bankofamerica/online_bofa_banking/e-online-banking/

Body of message(s):

Your Online Banking is Blocked.
We recently reviewed your account, and suspect that your Bank of America account may have been accessed by an unauthorized third party. Protecting the security of your account is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features.

To restore your account access, we need you to confirm your identity, to do so we need you to follow the link below and proceed to confirm your information:

Click here to Confirm your Information

Thank you for your patience as we work together to protect your account.

Sincerely,
Bank of America Customer Service

*Important*
Please update your records on or before 48 hours, a failure to update your records will result in a temporal hold on your funds.

Bank of America, N.A. Member FDIC. Equal Housing LenderLink opens Equal Housing Lender pop-up window
© 2008 Bank of America Corporation. All rights reserved

Beware.

VN:F [1.9.3_1094]
Rating: 0.0/10 (0 votes cast)

Monster.com phishing scam

December 31st, 2008 Chris Bailey No comments

Recent Monster.com phishing scams.

Subject lines:

  • notice: confirm your online records <message ref: 0413889094>
  • Monster customer service: details confirmation!
  • official information for client of Monster. <message ref: 9265493765>
  • software updating <message ref: 3188844944>
  • please update your data. <message ref: 3628458339>

Linking to:

  • http://hiring.monster.com.id-r01.com/serverdll/onlineemployerform.aspx?redirect=95603777633797495477266554307399130100464068937874718641744618023
  • http://hiring.monster.com.dll-s01.net/serverdll/onlineemployerform.aspx?redirect=70749851022342226999489520921667196851439
  • http://hiring.monster.com.file-p0174.eu/serverdll/onlineemployerform.aspx?redirect=261772616183425622980958122842289039024382580588889224462353327789782285439304
  • http://hiring.monster.com.dll-s01.com/serverdll/onlineemployerform.aspx?redirect=637673150729552209734169678576099465479472526966390
  • http://hiring.monster.com.id-r01.co.in/serverdll/onlineemployerform.aspx?redirect=699521817620622695298578162414247301428186059004104167

Body of message(s):

Dear Monster (Jobs & Careers) customer,

The added security measures require all Monster customers to complete Online Employer Form.
Please use the hyperlink below to access Online Employer Form:

http://hiring.monster.com/serverdll/onlineemployerform.aspx?redirect=95603777633797495477266554307399130100464068937874718641744618023

We appreciate your business and thank you for being a valued customer.

©2008 Monster – All Rights Reserved

and

Dear Monster (Jobs & Careers) customer,

The added security measures require all Monster customers to complete Online Employer Form.
Please use the hyperlink below to access Online Employer Form:

http://hiring.monster.com/serverdll/onlineemployerform.aspx?redirect=70749851022342226999489520921667196851439

We appreciate your business and thank you for being a valued customer.

Š2008 Monster – All Rights Reserved

And

Dear Monster (Jobs & Careers) customer,

The added security measures require all Monster customers to complete Online Employer Form.
Please use the hyperlink below to access Online Employer Form:

http://hiring.monster.com/serverdll/onlineemployerform.aspx?redirect=261772616183425622980958122842289039024382580588889224462353327789782285439304

We appreciate your business and thank you for being a valued customer.

©2008 Monster – All Rights Reserved

and

Dear Monster (Jobs & Careers) customer,

The added security measures require all Monster customers to complete Online Employer Form.
Please use the hyperlink below to access Online Employer Form:

http://hiring.monster.com/serverdll/onlineemployerform.aspx?redirect=637673150729552209734169678576099465479472526966390

We appreciate your business and thank you for being a valued customer.

©2008 Monster – All Rights Reserved

and

Dear Monster (Jobs & Careers) customer,

The added security measures require all Monster customers to complete Online Employer Form.
Please use the hyperlink below to access Online Employer Form:

http://hiring.monster.com/serverdll/onlineemployerform.aspx?redirect=699521817620622695298578162414247301428186059004104167

We appreciate your business and thank you for being a valued customer.

©2008 Monster – All Rights Reserved

Beware!!!

VN:F [1.9.3_1094]
Rating: 0.0/10 (0 votes cast)

Chase bank phishing scam

December 31st, 2008 Chris Bailey No comments

Subject line(s):

  • secure details confirmation <message id: 3666497726>
  • Chase Bank: instructions for client (message id: 4906962570)
  • Chase Bank customer service: your online account!
  • Chase Bank customer service: online banking account confirmation

linking to:

  • http://chaseonline.chase.com.userdl-isapi000074.org/Secure/webform/OSL.aspx?LOB=8890291378919271653046947785473580232567
  • http://chaseonline.chase.com.id017.es/Secure/webform/OSL.aspx?LOB=07148670316173954837085457513322538406057
  • http://chaseonline.chase.com.dtdl.tk/Secure/webform/OSL.aspx?LOB=7313169882695261379392634546122683978431567349259717051
  • http://chaseonline.chase.com.http.org.kg/Secure/webform/OSL.aspx?LOB=882856706423246346820251350892813566943601903798093980038483456

Body of message(s):

Note: This is a service message regarding the Chase Online Form.

Dear customer:

As part of the new security measures, all Chase bank customers are required to complete Chase Online Form. Please complete the form as soon as possible

To access the form please click on the following link:

http://chaseonline.chase.com/Secure/webform/OSL.aspx?LOB=8890291378919271653046947785473580232567

Thank you for being a valued customer.

Sincerely,

Online Banking Team

and

Note: This is a service message regarding the Chase Online Form.

Dear customer:

As part of the new security measures, all Chase bank customers are required to complete Chase Online Form. Please complete the form as soon as possible.

To access the form please click on the following link:

http://chaseonline.chase.com/Secure/webform/OSL.aspx?LOB=07148670316173954837085457513322538406057

Thank you for being a valued customer.

Sincerely,

Online Banking Team

and

Note: This is a service message regarding the Chase Online Form.

Dear customer:

As part of the new security measures, all Chase bank customers are required to complete Chase Online Form. Please complete the form as soon as possible.

To access the form please click on the following link:

http://chaseonline.chase.com/Secure/webform/OSL.aspx?LOB=7313169882695261379392634546122683978431567349259717051

Thank you for being a valued customer.

Sincerely,

Online Banking Team

and

Note: This is a service message regarding the Chase Online Form.

Dear customer:

As part of the new security measures, all Chase bank customers are required to complete Chase Online Form. Please complete the form as soon as possible.

To access the form please click on the following link:

http://chaseonline.chase.com/Secure/webform/OSL.aspx?LOB=882856706423246346820251350892813566943601903798093980038483456

Thank you for being a valued customer.

Sincerely,

Online Banking Team

Beware!!!
VN:F [1.9.3_1094]
Rating: 0.0/10 (0 votes cast)

Citizens Bank phishing scam

December 31st, 2008 Chris Bailey No comments

Here are a couple phishing scams received targeting Citizens Bank customers.

Note that the deactivated url in the message below was actually linking to http://ebanking-services.citizensbanking.com.file-id011.com/  The part after .com was the same.

The subject lines on Citizens banking phishing scams that I’ve received so far have been:

  • our new security measures
  • urgent notification from customer service
  • Citizens Bank: online form released
  • Security alert

Dear Citizens Bank customer,

We would like to inform you that we are currently carrying out scheduled maintenance of banking software, that operates customer database for Citizens Bank Business Express service.
Every Business Express customer has to update his Business Express online account. In order to update your account, please complete a Business Express Customer Form.
Please use the link below to access the form. The link is unique for each account holder.

http://ebanking-services.citizensbanking.com/Nubi/cust-directory/form.aspx?cid=555839788390159077256487573083712615808266913568107807092805376216301296619

Thank you for your cooperation. We apologize for any inconvenience brought.
This is auto-generated email, please do not respond to this email.
Citizens Bank Technical Department

Another one had the url:

http://ebanking-services.citizensbanking.com/Nubi/cust-directory/form.aspx?cid=5391123441245159987443809052367059298757802

which linked to http://ebanking-services.citizensbanking.com.file-id017.co.in/

And another one had:

http://ebanking-services.citizensbanking.com/Nubi/cust-directory/form.aspx?cid=045830499345346657164115307985915973519

which linked to http://ebanking-services.citizensbanking.com.dlls-to.mn/

VN:F [1.9.3_1094]
Rating: 0.0/10 (0 votes cast)