Omega Owners Forum

Chat Area => General Discussion Area => Topic started by: grifter on 21 September 2017, 21:41:11

Title: Scam Amazon order email
Post by: grifter on 21 September 2017, 21:41:11
Got an email the night from what looked like Amazon, opened it to find I had supposedly ordered:

Verbatim 53150 500GB Store 'n' Go Ultra Slim USB 3.0 2.5 Inch External Hard Drive - Black
Sold by Amazon EU S.a.r.L. £53.86

There is a Cancel these Orders button in the email which I guess is the bait for you to click on. Takes you to this funny URL "Amazon.Cancel.Order.R7lRab.Review"

So checked my Amazon, hadn't ordered anything, nothing out of bank. there is an address in the email saying:

Your order will be sent to:
chris kriticos
8 LEYLAND CLOSE
CHESHUNT, Hertfordshiore EN8 0ND
United Kingdom

that's Hertfordshiore!

Anyone else received one of these?
Title: Re: Scam Amazon order email
Post by: Bigron on 21 September 2017, 21:48:11
Yes, I've had loads, but as I know that I've never bought anything from Amazon, I blocked them all without opening. However, what's the point of having a "Block" option in Hotmail if it doesn't work?
This fake Amazon message is obviously a phishing scam to collect your details if you click on anything, so please just ignore them, Mr. Grifter.

Ron.
Title: Re: Scam Amazon order email
Post by: biggriffin on 21 September 2017, 22:09:27
Get them every day, seem to go straight into spam folder, also get similar from HSBC, not even HSBC customer,.
Title: Re: Scam Amazon order email
Post by: Migv6 le Frog Fan on 21 September 2017, 22:18:34
I get them from Rayban and Oakley for some reason.  :-\
Title: Re: Scam Amazon order email
Post by: Bigron on 22 September 2017, 00:47:40
I get some supposedly from PayPal, very convincing, proper logo and all, BUT they never address me by name, only Dear Customer - so straight into the bin!

Ron.
Title: Re: Scam Amazon order email
Post by: grifter on 22 September 2017, 06:17:47
I get them from Rayban and Oakley for some reason.  :-\

That's shady :)
Title: Re: Scam Amazon order email
Post by: Gaffers on 22 September 2017, 08:36:13
Loads of them about, some sophisticated, some not.  I saw a campaign targeting a previous client whereby an email spoofing the COO's email address was sent to accounts informing them of a change of supplier and someone will be in touch with the new bank details.  This update was sent about an hour later to someone else in the department.  It would have worked if the signature block used was not the company standard and the COO was not known to be on holiday.

Not all cyber protection is technical :y
Title: Re: Scam Amazon order email
Post by: Gaffers on 22 September 2017, 10:44:52
And this just popped up in one of my feeds this morning.  I had thoughts about this for some time and it seems my fears were founded.

https://learn.sparkfun.com/tutorials/gas-pump-skimmers
Title: Re: Scam Amazon order email
Post by: Shackeng on 22 September 2017, 11:33:16
Got an email the night from what looked like Amazon, opened it to find I had supposedly ordered:

Verbatim 53150 500GB Store 'n' Go Ultra Slim USB 3.0 2.5 Inch External Hard Drive - Black
Sold by Amazon EU S.a.r.L. £53.86

There is a Cancel these Orders button in the email which I guess is the bait for you to click on. Takes you to this funny URL "Amazon.Cancel.Order.R7lRab.Review"

So checked my Amazon, hadn't ordered anything, nothing out of bank. there is an address in the email saying:

Your order will be sent to:
chris kriticos
8 LEYLAND CLOSE
CHESHUNT, Hertfordshiore EN8 0ND
United Kingdom

that's Hertfordshiore!

Anyone else received one of these?

Do a malware check if you've clicked on it! :y
Title: Re: Scam Amazon order email
Post by: grifter on 22 September 2017, 17:50:56
Got an email the night from what looked like Amazon, opened it to find I had supposedly ordered:

Verbatim 53150 500GB Store 'n' Go Ultra Slim USB 3.0 2.5 Inch External Hard Drive - Black
Sold by Amazon EU S.a.r.L. £53.86

There is a Cancel these Orders button in the email which I guess is the bait for you to click on. Takes you to this funny URL "Amazon.Cancel.Order.R7lRab.Review"

So checked my Amazon, hadn't ordered anything, nothing out of bank. there is an address in the email saying:

Your order will be sent to:
chris kriticos
8 LEYLAND CLOSE
CHESHUNT, Hertfordshiore EN8 0ND
United Kingdom

that's Hertfordshiore!

Anyone else received one of these?

Do a malware check if you've clicked on it! :y

I'd clicked in to email but not on any of the links. Got Malwarebytes so will give that a bash, it's due a run anyway.
Title: Re: Scam Amazon order email
Post by: Rods2 on 23 September 2017, 00:56:42
A good rule on any unexpected email is not to click on any links as there may well be malware on the end of it and don't open any attachments especially zip files which will probably contain viruses. >:( >:( >:(

I get both from the monitoring of emails on several websites with my job.

Parking tickets with details in a zip file and an appeal link is another popular one. Another at the end of the month is a wages email with a zip file with details and a time-limited confirm your details link. Parcel ones happen all the time and if generic and unexpected don't open the attachments or links.

Immediately deleting stops any compromises. :y :y :y

It is interesting reading on what the Russian FSB, GRU and SVB agencies have used in the way of targeted emails to compromise the Republican and Democratic parties and various Government agencies in the US with the Gmail (sic) compromised accounts with a validation login button being a particularly successful one. :( :( :(