Sign in to follow this  
Followers 0
Jeepers

Newest Scam

4 posts in this topic

If you get one of these notice if the order number is hyper-linked. If it is, delete.

 

 

 

Amazon.com – Your Cancellation Fraud Email:

 

 

In a clever twist, a newer Amazon fraud attempts to hijack your account by pretending to send you an order cancellation email.

 

The email we’ve been seeing claims to come:

 

 

From: ”order-update@amazon.com” <order-update@amazon.com>

Subject: Amazon.com – Your Cancellation (7453-14594-3697370)

 

Of course the sender From address is spoofed, this is not a legitimate Amazon communication, and the Reference number is randomly generated in order to evade spam filters that might look for identical subject line contents.

 

The clever part is the email itself:

 

 

Dear Customer,

 

Your order has been successfully canceled. For your reference, here`s a summary of your order:

 

You just canceled order #5123-646266-10986

 

Status: CANCELED

 

_____________________________________________________________________

 

ORDER DETAILS

Sold by: Amazon.com, LLC

 

_____________________________________________________________________

 

Because you only pay for items when we ship them to you, you won`t be charged for any items that you cancel.

 

Thank you for visiting Amazon.com!

 

———————————————————————

Amazon.com

Earth`s Biggest Selection

 

http://www.amazon.com

 

———————————————————————

 

In the message above, the words “Order Details” are hyperlinked to any number of various attack sites used to download malicious code and/or to capture personal information, passwords and other financial details.

 

Given the great numbers of consumers who shop Amazon and it’s affiliate store fronts on a regular basis, who wouldn’t be curious to know what order was recently canceled and why?

 

From a social engineering standpoint, this Phish is baited quite well.

 

 

 

http://blog.onlymyemail.com/amazon-com-your-cancellation-fraud-email/

Share this post


Link to post
Share on other sites

We got it. Thank the Lord our virus protector would not let us open it. I had just ordered something a few days earlier and without thinking, I tried. The protector wouldn't let us. We also got it on other web sites--ex. Catherines. I ran a complete scan after that. :beat_deadhorse:

 

 

Thanks for the confirmation, Jeepers.

Share this post


Link to post
Share on other sites

Sneaky, aren't they? :tapfoot:

 

I got this one today...

 

Dear Customer,

 

Your order has been successfully canceled. For your reference, here's a summary of your order:

 

You just canceled order 104-165-15212 placed on May 6, 2012.

 

Status: CANCELED

 

It did include an actual "item" name that I supposedly canceled. :shakinghead:

 

This is why it's so important to have several email accounts for different things. But I'm wondering if Amazon was hacked, because this account *is* the one I use for Amazon.

Share this post


Link to post
Share on other sites
Guest
You are commenting as a guest. If you have an account, please sign in.
Reply to this topic...

×   You have pasted content with formatting.   Remove formatting

  Only 75 emoticons maximum are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

Loading...
Sign in to follow this  
Followers 0