Apart from the obvious problem (Scam Detectives don’t use Vodafone) you’ll see from the email below that it’s a bog standard “phishing” expedition.

Dear valuable customer,

We recently detected an unusual activity on your account. We will now place a hold
on your account until this issues have been resolved online by verify your identity a
as the authorized access holder.

You are strictly advised to match your information rightly to avoid
service suspension., click on

Log In to My account to restore your access.

Important: You will be asked to verify your personal details.

Vodafone Limited

* This e-mail has been sent for information purposes only, please do
not reply to this e-mail as it is routed to an unmonitored mailbox.

How can you tell it’s a phishing email?

1) It’s addressed to “Dear Valuable Customer” – Surely Vodafone knows your name?

2) It contains some very strange sentence structure – “We will now place a hold
on your account until this issues have been resolved online by verify your identity a
as the authorized access holder.” and “You are strictly advised to match your information rightly to avoid service suspension.” Either Vodafone have employed Yoda in their customer contact team, or it’s very badly written by a scammer without a decent grasp of English…

3) It threatens service suspension if the request is not complied with. (Commonly seen in more traditional phishing emails targeting online banking)

4) It contains a link to log in to your account (which actually goes to a domain not remotely connected with Vodafone – “http://ns2.compro.cz/online.vodafone.co.uk/dispatch/Portal/appmanager/vodafone/wrp.html”)

So, what would a scammer want with your mobile phone account?

Once they have access to your online account they can:

1) Change your delivery address and order additional handsets on your account to be delivered to a “drop” address anywhere in the country.
2) Access your online statements and bank details
3) Receive your bills to facilitate identity theft
4) Report your handset as lost and request a new SIM card, allowing them to make calls at your expense

All of this can cause you innumerable problems. At best, you’ll find yourself paying Vodafone for services you haven’t ordered. At worst, you could find that your identity is being used to apply for credit cards, loans and other financial products which could destroy your credit rating and take months to sort out.

If you’ve already clicked on the link and given over your details – Contact Vodafone Customer Services by dialling 191 from your handset (or 08700 700191 from a landline) and ask to speak to the fraud team.

If you’ve received the email but haven’t clicked the link yet – Just delete it. Now.

If you think that there might actually be a problem with your account, delete the email and call Vodafone Customer Services on 191 (from your handset) or 08700 700191 (from a landline) and speak to customer services. They’ll know if there’s a problem and will help you to resolve it.

Remember: NEVER click on links in emails from anyone with whom you have a financial relationship. Ever.

What’s it all about?

At Scam Detectives HQ we received an email from Twitter advising us of a DM from one of our followers.

It looked like this:

So, was someone really saying horrible things about us? No.

This is a classic phishing scam.

Clicking on the link took us to a fake twitter login screen where we were told that our Twitter session had expired and we needed to login again.

If we’d fallen for it, our followers would soon be receiving similar DMs from us and wouldn’t exactly be happy about it!

What should you do if your account has already been compromised?

If you can, change your password. Log in to your Twitter account, (by typing www.twitter.com into your browser, NOT from a link in an email) and click on your name in the top right hand corner. Click “Settings” and change your password to something that you’ll remember but won’t mean anything to anyone else (remember to include numbers, letters and special characters). That’s it, job done.

If you can’t change your password (because the spammer has already locked you out) you’ll need to reset it. To do this, visit https://twitter.com/account/resend_password

Remember to be very careful about clicking on links you find on Twitter and especially in DMs, even if they come from someone you know and trust.

We’ll give the last word to Twitter, who offer this advice in the help centre.

Evaluating Links on Twitter

Lots of links are shared on Twitter, and many are posted with URL shorteners. URL shorteners, like bit.ly or TinyURL, create unique, shortened links that redirect to your longer link so it can be more easily shared. URL shorteners can also obscure the end domain, making it difficult to tell where the link goes to.

Some browsers have free plug-ins that will show you the extended URLs without you having to click on them. Here are links to plug-ins for Internet Explorer and Firefox (which is a free-to-download browser):

URL Expanders for Internet Explorer
URL Expanders for Firefox

In general, please use caution when clicking on links. If you click on a link and find yourself unexpectedly on a page that resembles the Twitter login page, don’t give up your username and password! Just type in Twitter.com into your browser bar and log in directly from the Twitter homepage.

Today, they’ve come pretty close.

We received this email in one of our “catcher” accounts today:

DEAF LOTTERY ASSOCIATION
WINNER NOTIFICATION

Dear Winner,

CONGRATULATIONS!! You have won the Deaf Lottery!!

Your e-mail address was drawn at random from 300,000 registered deaf people around the world , You are therefore to receive a cash prize of £2.8 Million (TWO MILLION and Eight Hundred Thousand Pounds) from the total payout.Your prize award has been insured with your e-mail address and will be transferred to you upon meeting our requirements, statutory obligations, verifications, validations and satisfactory report.

Draw Details:
Ref Number: PW 9520 ES 9414
Batch Number: 575881545-NL/2010
Draw Date: Sat Jan 21 2012

To claim your prize please contact our claims agent giving these details:
——————–
Names:
Address:
Telephone/Fax number:
Nationality:
Age:
Sex:
Country:
Occupation:
State:
E-mail:
————————
Claims Agent:-
Mrs Angela Lott
Email: (lottangle@aol.com) or (deaf_lottery@rediffmail.com)
———————–
Draw Details:

Draw Details:
Ref Number: PW 9520 ES 9414
Batch Number: 575881545-NL/2010
Draw Date: Sat Jan 21 2012

Yours Faithfully,
Mrs Angela Lott
Lottery Coordinator.
HOT LOTTO.”

It’s a pretty standard “lottery” scam, and anyone who responds will be asked to pay a fee to claim their prize.

Of course, there is no prize, and the victim will lose every penny that they send chasing the fictional millions.

If you have any deaf family members, friends or colleagues, please make them aware of this scam.

Thank you.

This morning we received an email from one of our clients which read as follows:

 

Hi there.

I’m really sorry to reach out to you this manner and I’m sorry for not informing you about my urgent trip to Scotland. I am here for a Seminar and to complete a project.

I want this issue to be confidential between You and I because I don’t want people to get worried about my situation.

Everything was fine until I got robbed on my way back to the hotel and I lost my Wallet, mobile phone and some valuables during this incident. I had to block my account and bank cards immediately.

I am facing a hard time here because I have no money on me to clear Hotel bills and some expenses. I’m sending you this message because I need your help with a loan of £3350 to pay up the bills and make arrangements to get back home.

Am sorry for the inconvenience this message might cause you but please understand that am in a very bad situation right now and would appreciate if you could help me out.

Best regards,

(name removed)

You’ll need to check that your computer isn’t infected with a backdoor virus, keylogger or other malware that has led to your password being compromised. Run a full virus scan and deal with any infections BEFORE you log in to any other online services.

1) Be very careful when using public computers or networks to log in to your email or other subscription services.  There’s a useful guide from “LifeHacker” on using public networks safely here

2) Make sure that you’re using a strong password that consists of numbers, letters and special characters (*, $, !, £ etc.) to make life difficult for hackers

3) Use a different password for every site you use.

4) If possible, don’t use webmail (hotmail/aol/yahoo/gmail) for sites that require a password. Once a hacker has control of your email account, they can request password reminders from the websites you use and compromise these accounts. Use your ISP email address for anything that requires a password.

5) Keep a list of the sites that you use somewhere safe offline so you know who you need to get in touch with if your email account is hacked

6) Keep a list of your contacts somewhere other than your webmail account, so you don’t lose them if your account is hacked

This may all seem like a lot of work, (and a pain in the arse!) and it is, but prevention is ALWAYS better than cure and a few minutes work now could save you long hours of running around if your account is ever compromised.

The strange black squares that have been cropping up in increasing numbers in magazines and newspapers; on posters, tickets and websites are likely to become even more commonplace in 2012 with many companies utilising them in increasing numbers.

However, presuming they are harmless could be playing into the hands of cyber criminals.

According to a recent study around 50% of the 1,200 consumers surveyed interacted with a QR code when they saw one, with 21% then going on to share personal information.

Curiosity and information-gathering were the primary reasons for wanting to scan a code, and the promise of discounts and special offers seemed to be the most effective way to generate interest.

A QR matrix barcode can store alphanumeric characters in the form of text or URLs – all you need to “visualise” such a code is a smartphone with a camera and a QR reader application to scan it.
The code would typically direct you to a website, however, it can also promote online videos, send text messages and e-mails, or install and launch apps.

Fast, easy and very popular, QR codes are clearly a convenient way to stay informed anytime, anywhere. But the downside is that you often don’t know the content of a QR code until you scan it.

For this very reason you should take the same degree of care when scanning a QR code as you would when downloading an unknown file on the internet.

Cyber-attackers might use these codes to redirect you to malicious websites that ask you to download applications that may be infected with malware.
These, in turn, could:
Make your calendar, contacts and credit card information (if you shop or bank online using your smartphone) visible to cybercriminals.

Attempt to steal your Google or Facebook password – many apps are integrated with various social networks.

As a result, some users may enter their information without suspecting that it is being sent to an illegitimate source.

Track your location.

Install keylogging software.

Send an SMS to a premium number, racking up your phone bill.

“Jailbreak” a device and distribute additional malware.

Redirect users to malicious applications.

So if you care about your mobile security, you’d be wise to stay away from malicious QR codes!

One notable attack via QR code took place in Russia in 2011, and involved a Trojan disguised as a mobile app called Jimm. Once installed, “Jimm” started to send a series of expensive text messages (which cost £4 each), racking up unwanted charges.

This is just one of the ways malicious users can take advantage of these codes in order to gain control over a smartphone, so it goes without saying that users should take particular care of what they’re scanning and be aware of what they’re expecting to find.

So how can you spot and avoid malicious QR codes:

1. Educate children on the nature of QR codes – with many youngsters now sporting smartphones it could be all too tempting for them to scan these codes simply out of curiosity, which could leave them at risk of attacks similar to those described above. Better yet, installing a mobile security suite can help protect them against hidden threats, offering you significant peace of mind.

2. Use a mobile QR code-/barcode-scanning app that previews URLs. Avoid scanning suspicious codes and links that don’t seem to match the ads they’re incorporated in; also avoid shortened links.

3. Don’t scan QR codes in the form of stickers placed randomly on walls or billboards. QR codes can be generated by anybody and placed in public places with the intention of peaking an individual’s curiosity, and unless the message gets out there that these may not all be from legitimate sources, scammers will look to take advantage of this relatively new technology to further their own ends.

4. Be extra careful if your smartphone works on the Android mobile operating system. Android is an open platform, which means that its source code can be examined by criminals and exploited more easily when they find a weakness in, for example, the Android browser. That’s why most malicious apps transmitted via QR codes target the Android-based smartphones. So, make sure your Android browser is always up-to-date and only scan QR codes from trusted sources.

5. Be particularly wary of QR codes that are linked to monetary and transaction services – these direct links to money are typically prioritised by malicious third parties when choosing how and where to attack.

6. Consider installing a mobile security app.

So be careful out there folks; the world of technology is rapidly evolving, mostly for the better, but we must remain fully aware of possible misuses and abuses & apply our common sense whenever possible…

Norman Feiner, Managing Director – SimplyFone Ltd

(Idea for Blog, Source: Comms Business)

About SimplyFone Ltd

Simply-Fone was established to provide competitive telephone services to UK Businesses & Residential Clients…

For over 20 years we have been providing low-cost, innovative, cost-effective telephony solutions to residential and business customers in the UK and beyond.

Today, Simply-Fone is one of the fastest growing telecom companies in the UK and a recognised brand name with a loyal customer base and a wide range of reliable and competitive products on offer.

Our mission is to provide home and business users superb value but without compromising on quality.

We offer amongst the lowest phone rates and line rentals in the UK

Simply-Fone currently provide telecoms solutions to 1000′s of home & office users and are a UK leader in the provision of low-cost international call services from mobiles and landlines with 100,000′s of regular users.

I haven’t really embraced Facebook as a promotional avenue (although Scam Detectives has it’s own page) but many of you do.

So, I thought you’d be interested in a little experiment I carried out this week, to see just how secure pages created by Facebook’s “Places” feature are.

If you’re not familiar with it, Facebook Places allows you to “tag” yourself and your friends when you visit business premises, such as your favourite coffee shop, cinema, restaurant or shop.

Once you’ve “checked in” to a place, the feature creates a “Places” page for your business automatically. Here’s one for Starbucks in Wrexham

See the line highlighted in yellow? It says “Is this your business?”

If it is your business, you have an opportunity to claim the place, merge it with your official business Facebook page and make sure that anyone who checks in or visits that place is directed to your official fan page.  Sounds like a good idea, doesn’t it?

Clicking on the link will take you through “verification” where you have to prove you are an official representative of the business, so Facebook can be sure that you are authorised to take control of the page.

So how secure is it?

Some of you will know that outside of my activities on Scam Detectives I have two arms to my business. The first is a web design business at www.clearascrystal.we.bs and the second is an e-safety training firm at www.clearascrystal.co.uk

Because the two divisions are so different in their aims, objectives and target market, there’s nothing to connect the two, and they have very separate marketing strategies.

So, I checked into Clear as Crystal Web Design and, as expected, my Facebook Places page was created.  I claimed the page using the same Facebook account that I use to administrate Clear as Crystal Web Design’s Facebook page, and because of the existing link, I didn’t have to verify my credentials. Fair enough.

Then I logged in using an (obviously fake) alternative Facebook account.  I visited the Facebook Places page and clicked “Is this your business?”

I completed the verification details, as below

BUT, instead of using my “charles@clearascrystal.we.bs” email address, I used “charles@clearascrystal.co.uk” to confirm that I represent the business.

See the subtle difference?

3 Days Later….

Hi SD,

Thanks for your interest in Facebook Places! We’ve approved your claim. Now you can manage your place on Facebook and publish News Feed updates to people who like it. We hope you enjoy this additional opportunity to promote and grow your business on Facebook.

1. Get Started
You can manage your place from your personal Facebook account. Get started here: http://www.facebook.com/pages/manage/

2. Merge Your Place with a Page
Do you admin a page that’s similar to this place? If so, you may be able to merge the two. Go to your page and click the ‘Edit Page’ button in the top right corner. Then click Resources in the left column menu. If the option is available, you’ll see a ‘Merge duplicate pages’ link that will allow you to complete the merge.

3. Learn More
Read common questions and answers in out Help Center: http://www.facebook.com/help/?page=1159

Thanks,

Chuck
User Operations
Facebook

 

SO, if your competitor registers a similar enough domain to yours, using an alternative extension such as .com, .org, .tv, .net, .info or any one of a hundred different top level domains, Facebook could think it’s “close enough” to allow them to take control of your business Places page.

Search Facebook for your business name. Now. Then claim your Places page before somebody else does.

“Parents need help now to understand the technologies their kids take for granted, and to learn how to keep their kids safe on the Internet, before it’s too late”

That was the stark message from Internet safety consultant Charles Conway*, speaking to representatives of the Welsh Assembly, voluntary organisations and churches from across Wales at the Flintshire Gweini Conference** in Mold on Friday (21st October).

Quoting the latest OFCOM media literacy survey, he said that whilst up to 70% of parents say that they know less about the Internet than their children, only 37% have taken the most basic steps to protect their kids from Internet related threats such as cyberbullying, inappropriate content and grooming.

According to Conway, a consultant with Wrexham based e-safety training firm Clear as Crystal Training and the editor of popular scam awareness website Scam Detectives, the key to keeping kids safe online is for their parents to understand how they use Internet connected technologies, and to become more aware of what risks they face when they do get online.

Only then, he says, can parents effectively communicate these threats to their children.

“We need to take the online safety message off the Internet and into the community groups where parents are getting together” he said. “Whilst there are some fantastic resources on the internet to support parents, if they don’t understand the technology, and don’t know what questions they should be asking, they can’t know where to look for the answers”.

He was critical of parents who allow younger children to join social networking websites such as Facebook in contravention of the “no under 13’s” rule.

“Facebook is not suitable for young children” he said “When parents allow younger children to join the site, they not only put them at risk of cyberbullying and exposure to inappropriate material but also of contact with strangers who may mean to do them harm. Even if Facebook was completely safe for young kids, allowing them to have an account when they’re under-age teaches them that the rules don’t apply to them and that it’s OK to lie about their age to get what they want, which isn’t a healthy message for them to learn from their parents.”

He said that parents have to take online safety as seriously as teaching their kids to cross the road, and to apply the same principles.

“Yes, with opportunity comes risk and children need to be prepared for that risk. But we teach our children to cross the road safely, we don’t push them in front of a bus and hope they get out of the way in time. By allowing them to use the Internet without guidance and supervision, we’re pushing them in front of that bus.”

Despite the risks, he says that the Internet is a “hugely positive space” for our kids.

“When you look beyond the risks of cyberbullying, inappropriate content and contact with strangers, the Internet has opened up a whole world of opportunity for our kids. Employers will expect them to have the skills that they need to update the Company website, process online orders and to harness the power of social media to engage potential clients, and if we don’t allow them to learn those skills, we risk failing them as parents and putting them at a distinct disadvantage. So we need to balance our responsibility as parents to keep our kids safe with our responsibility to encourage them to learn how to use the technology effectively”.

He concluded by asking Government, schools, voluntary organisations and churches to commit resources to training parents in online safety issues.

“These parents need our help. Before it’s too late”.

Footnotes:

* Charles Conway is the editor of online safety website “Scam Detectives” and an online safety trainer at Wrexham based Clear as Crystal Training, providing internet safety training to parents, teachers, social workers, foster carers and children. Twice shortlisted for the prestigious “Nominet Internet Award” for “making the Internet safer”, Charles is passionate about the vulnerability of children online and helping those who care for them to “bridge the gap” between what they know about the ‘net and what their children know to help them to make informed choices about their children’s internet activity. He’s also an associate member of the UK Council for Child Internet Safety (UKCCIS).

** Gweini Serving the Christian Voluntary Sector was established in October 1999 by Care for Wales, Cornerstone Church Swansea, Evangelical Alliance for Wales and Tearfund. Gweini is run under the umbrella of the Evangelical Alliance Charity No 212325 and is known as the Council of the Christian Voluntary Sector in Wales, previously called the Council of Christian Community Work in Wales.

]]> http://www.scam-detectives.co.uk/blog/2011/10/24/parents-need-help-to-keep-their-kids-safe-online/feed/ 4 http://www.scam-detectives.co.uk/blog/2011/10/18/facebook-game-pet-society-is-now-safer-for-its-6-5-million-users/ http://www.scam-detectives.co.uk/blog/2011/10/18/facebook-game-pet-society-is-now-safer-for-its-6-5-million-users/#comments Tue, 18 Oct 2011 10:29:57 +0000 admin http://www.scam-detectives.co.uk/blog/?p=920 Following pressure from Internet Safety Consultant Charles Conway, a “dangerous” loophole in popular social game Pet Society has been closed.

Addressing a group of foster carers and social workers in North Wales last month, Internet Safety trainer Charles Conway from Clear as Crystal Training highlighted a potentially dangerous loophole in the popular Facebook game Pet Society which meant that players of all ages were rewarded for adding complete strangers to their Facebook friends list, putting them at risk of grooming and other forms of inappropriate contact.

To demonstrate the risk, Charles took his pet “BunnyPig” to a social area of the game, the “Pet Society Cafe”, where other pets were sitting round drinking coffee and socialising. A large poster on the wall encouraged him to “CLICK ON A PET TO VISIT THEIR HOUSE” and Charles selected one at random, a purple cat in a fetching stetson and cowboy boots.

“By visiting this pet, I’m earning coins to spend in the game” he explained. “I can also earn extra points by leaving the pet a small gift, such as a frisbee, football or other toy, enclosing a note at the same time. Again, this seems like harmless fun as long as the pet I’m visiting belongs to one of my “real life” friends, but in this instance, it doesn’t. This pet belongs to a complete stranger, and by clicking on an icon on the screen I can visit that person’s Facebook profile, see their profile picture and “add” them as a friend, bringing their pet into my pet’s ‘village’ so I can visit them again and earn more coins. Unfortunately, by adding this person as a friend, we don’t only become connected in “Pet Society”, but on Facebook as a whole, so this person can then send me private messages, see when I’m online for chat sessions and view everything on my profile including photographs of me, my family and my friends. Bearing in mind how attractive this games are to kids, the risk of inappropriate contact becomes very obvious. It also starts to explain how parents can find that instead of the 50 or 60 close friends that they know in ‘real life’, their child has a Facebook friend list that numbers in the hundreds or even thousands”

On October 3rd, social gaming website Games.com reported on Charles’ concerns about this feature in this article

Playfish have yet to comment publically, yet sometime between the publication of this article and yesterday, they quietly removed the “Go to Profile” link from the game.

Charles is understandably pleased at this latest development.

“This is fantastic news, and makes the game safer for every one of it’s 6.5 million monthly users” he said today. “It shows that Playfish have listened and reacted positively to what was a potentially dangerous situation. I applaud them for stepping up and taking the safety of their users seriously.”

Playfish isn’t quite off Charles’ radar yet though. This week he’s brought another of their games into the spotlight, accusing the company of rewarding players for having “cybersex” with virtual cash in the hugely popular Sims Social game.

]]> http://www.scam-detectives.co.uk/blog/2011/10/18/facebook-game-pet-society-is-now-safer-for-its-6-5-million-users/feed/ 0 http://www.scam-detectives.co.uk/blog/2011/10/14/facebook-game-encourages-and-rewards-underage-cybersex/ http://www.scam-detectives.co.uk/blog/2011/10/14/facebook-game-encourages-and-rewards-underage-cybersex/#comments Fri, 14 Oct 2011 12:10:36 +0000 admin http://www.scam-detectives.co.uk/blog/?p=916 Internet safety consultant Charles Conway accuses popular Facebook game “The Sims Social” of rewarding kids for engaging in underage “cybersex”.

“Create unique Sims and live out their dreams—or stir up trouble by pulling pranks. Develop deep relationships to unlock new features and advance: befriend and fight, date and cheat, love and betray. Play with life in a whole new way—with your real friends, for free!”

That’s the hype on the latest version of Electronic Arts’ popular “Sims” franchise, bringing the game to Facebook in the form of “The Sims Social”.

On the face of it, the game looks like fun. Players can create an online alter-ego, build a house, buy furniture, take care of their personal hygiene needs and socialise with other players. By building your character’s social life, you earn points which help you to unlock new features, buy more stuff for your character and advance in the game environment.

Charles Conway, a consultant at Internet safety training firm Clear as Crystal Training and the editor of online security website Scam Detectives says that the personal relationships that can develop between players should give parents cause for concern.

“When playing “Sims Social” players can interact with other users in a lot of different ways, but they are rewarded for entering into romantic relationships with other players. These romantic relationships can develop quickly into sexual relationships, with options to have sex in different locations, including the bedroom and the shower. Sex between players is rewarded with “social points” which are then used to advance within the game environment” he said yesterday

Charles has some tough questions for the game’s developers, who he says should restrict access to more adult features of the game to “adults only”.

Even if Facebook did verify the age of it’s users (which it doesn’t), at what age does it become acceptable for a child to engage in “virtual sex” for rewards? Does it ever become acceptable? Isn’t sex for rewards the very definition of prostitution?

How is playing this game different to children having “cybersex” in a chatroom?

Doesn’t encouraging and rewarding sexualised behaviour between “avatars” encourage underage “offline” relationships of an inappropriate nature?

Is there a risk of bullying when two players enter into a same sex relationship?

Shouldn’t sexual activity within the game environment be restricted to those who are at or above the legal age of consent for “real life” sex?

“I’m also very concerned about the opportunities this game opens up for online grooming” said Charles.

“When 40% of kids admit that they have Facebook “friends” that they don’t know in “real life”, there’s a real risk of a predator using a game like this to build a relationship with a child that could lead to real world abuse. Paedophiles rely on their ability to break down a child’s inhibitions and get them to talk about sex, which is why we as parents teach our kids that talking about sex in the online space is not acceptable. So why does a game like this actually enable children to explore sexual relationships without warning of the dangers?”

In conclusion Charles says that, whilst parental control and supervision is vitally important to online safety, online content developers have to play their part too.

“By restricting access to this game to over 18′s, or at the very least creating a “child friendly” version of the game that does not allow sexual relationships, Playfish and Electronic Arts could demonstrate a commitment to keeping teens safe online. By not doing so, they’re potentially putting kids at risk of grooming, cyberbullying and confusion about where “real world” boundaries lie”.

Editors Note: We’re waiting for a response from Electronic Arts and we’ll update this article when we receive it

 

 

 

 

]]> http://www.scam-detectives.co.uk/blog/2011/10/14/facebook-game-encourages-and-rewards-underage-cybersex/feed/ 0 http://www.scam-detectives.co.uk/blog/2011/10/14/very-convincing-virus-emailinvoice-from-yesasia-com/ http://www.scam-detectives.co.uk/blog/2011/10/14/very-convincing-virus-emailinvoice-from-yesasia-com/#comments Fri, 14 Oct 2011 11:08:46 +0000 admin http://www.scam-detectives.co.uk/blog/?p=912 Another very clever social engineering scam attempting to trick you into downloading a virus to your computer.

You’ll see that the email uses my full name, but the URL is spoofed. The actual url linked to is “yesasia-payment-service.com/[removed]” which attempts to download a zip file apparently containing your invoice.

It’s a clever one, and I’m afraid that lots of people will be taken in by it.

If you receive any order confirmation for an order you haven’t placed, DO NOT click on the link, but check with your credit card provider to make sure you haven’t been a victim of online fraud. Chances are you haven’t, but it’s better to be safe than sorry.

]]> http://www.scam-detectives.co.uk/blog/2011/10/14/very-convincing-virus-emailinvoice-from-yesasia-com/feed/ 5