Wednesday, December 26, 2012

Popular 2012 Cyber Scams

Okay, we still have a week to go here to roll through the holiday season and settle down and focus on 2013, but I was reviewing my email inbox for December and realized I had received at least one example of each of the below scams (and in some cases, two of three per example).

How many of these can you check off as having received during the holiday season?

[ ] Phoney PayPal Payment Confirmation Email
[ ] Phoney YouTube Video Upload Confirmation Email
[ ] Phoney Bank Account Has Been Suspended Email
[ ] Phoney Discounts/Gift Cards on Holiday Items
[ ] Phoney Someone is Stranded & Needs Help Email
[ ] Phoney Facebook Friends Request Email
[ ] Phoney LinkedIn Connection Request Email
[ ] Phoney UPS/FedEx/USPS Delivery Invoice Email
[ ] Phoney Charity Money Request Email
[ ] Phoney Crazy Inheritance Email (can't believe this one still exists)
[ ] Phoney Work-At-Home Job Opportunity Email
[ ] Phoney Response to Craigslist Posting Email

I have to say, I am a popular girl with the scammers.

Tuesday, December 25, 2012

YouTube Email Scam

Scammers do not rest on Christmas. People who are amoral and online criminals do not really observe holidays. Notice the time stamp of the below scam email. Ok... do not notice the time stamp of my posting of this scam email to alert others. They won't let it rest, neither will I.

So here is one example of how a scam fake youtube notification email looks. I used a screen shot so you can see how they set it up to look like the email is coming from youtube to tell you your video has been approved. As I have not uploaded any videos to youtube, I'm clearly not their target, but they send out millions of these emails, knowing that lots of people DO upload videos to youtube and certainly some percentage of them will think this is a real notification and click on one of those darn links in the fake email.

The message for the link of the supposed video says this: "The link for the video says: There was a problem connecting to YouTube. This video may not exist or it may only play on YouTube. Try going to their website: www.youtube.com/watch?v=IEaaDkFzYw0a&feature=topvideos_mp"

An unsuspecting user will then think, oh I have to click on one of these other links to go see my video - and *all* the other links in the scam email actually redirect the user to a clearly bogus and probably malicious website: http://hasret.ekarakus.com/deliriously.html [I put the link here but DON'T go to it, I wouldn't even risk what would happen, especially since many of these malicious pages can just begin downloading spyware to your computer so they can track your keystrokes, seeking out your passwords. So don't try that link.]

The header of the email looked like this:
From:    YouTube Service (lwong@50.22.132.48-static.reverse.softlayer.com)
Return-Path: lwong@50.22.132.48-static.reverse.softlayer.com
Date: Tue, 25 Dec 2012 03:33:07 -0700 (PDT)
Subject: YouTube Service has sent you a personal message: Your video has been approved‏

and below is an image of the bogus email content, designed to look as if youtube was actually notifying you of your upload. Remember, none of the links actually go to youtube, they all go to a fake page that probably looks like youtube if you are not paying attention to the actual destination of the url and not just the blue underlined label you see in the email.

Give me a Christmas gift and do NOT fall for this scam. Let the scammer go empty-handed this time. Make my day.



Monday, December 10, 2012

Email Scam: It's Going to Be a Long Tax Season

Scammers are going to pile on the tax-related scams now until April. People are starting to collect up their 2012 information as the year ends, accountants are reminding their clients what to collect up and do by the end of the year, and scammers know this is a timely topic. Unsuspecting people will read it. This one is targeted at Accountants. DO NOT CLICK ANY LINKS IN ANY TAX-RELATED EMAIL.

I didn't mean to shout, but I kinda did...

It doesn't matter the scammer sent this to everyone. They only care about those sub-set of people receiving it who actually ARE members of AICPA and thus more likely to click on the link. It's a numbers game to them.

From: AICPA (alert@aicpa.org)
Return Path: [normalizationcf51@blomnet.com]
Subject: Tax return assistance  fraud prosecution.

Having trouble reading this email? (actually redirects to: http://cccjinfo.com/components/com_ag_google_analytics2/taxfraudalert.html) [Does this mean the scammers are actually tracking the responses on their scam emails to improve their effectiveness? Yikes. They can set up google analytics and yet can't spell or format worth crap below??]

You're receiving this informationas a Certified Public Accountant anda  member of AICPA.Having trouble reading this email?  Take a look atit in your  favorite browser.
        
Revocation of Public Account Status due to income tax  fraud

Dear  AICPA participant,We have received a delation about your possibleassistanceinincome tax refundfraud  for one of youremployers. In obedience to AICPA Bylaw Section No.700your Certified Public Accountantstatuscan beterminatedin case of the actoffilingof a incorrector fraudulentincome tax return for your client or employer.Pleasefamiliarize yourself with the notificationbelow andrespond toit within 7 business days.The  denial toprovide the clarificationswithin thistermwouldresult indiscontinuationof your Certified Accountant Career.Complaint.pdf

The American Institute ofCertified PublicAccountants.  Email: service@aicpa.orgTel. 888.777.7077Fax. 800.362.5066

Saturday, December 1, 2012

Scammer: Bobby Paul

Here is a typical fake buyer scam, where they go for the high-ticket item in order to steal more cash in the scam. Remember, the scam is they pay with a counterfeit check or stolen credit card, overpay and say some non-existent shipping company is going to pick up and they ask you to forward that money on to the shipper via wire transfer. The scammer's money is fake but the money you forward is your own and real and it is just the scammer at the other end of that wire transfer, and once they pick up the money, it is gone and untraceable.

Also, when scammers say they can pay via paypal, they end up doing one of two things (or sometimes both): they send a fake paypal confirmation email saying the payment has been received by paypal (when, in fact, no money was paid... the scammer is hoping the victim doesn't check before forwarding the money via Western Union) or they come up with some story as to why paypal doesn't work for them and can they pay via certified check or credit (which falls back to being counterfeit or stolen).

Here is the email sent to me:

Hi Kathleen,

I’d like to add the cell phone number from “Bobby Paul”, when he initially contacted me by text.  It’s:  954-284-0147 which I think is in Florida. Thanks again for your website.  I’m grateful for your information to help protect people from disgusting scammers.

Sincerely,
Rhonda

From: Rhonda
Sent: Tuesday, November 27, 2012 1:26 PM
Subject: Fw: Motorcoach for sale

Hi,

I received this email from what I thought is a prospective buyer for my motorhome I have listed on Kijiji.  They initially sent me a text message with their interest to purchase and requested my email address.  I sent an email at 10:08am but when his reply email came the time showed 4:08am on the email I had initially sent...5 hour time difference?  This email sounds like a scam.  Now they have my email address and cell phone number.

Thanks for your helpful site.  Bobby Paul looks like another scammer name for your list.

------------

To: bobbypaull@yahoo.com
Sent: Wednesday, November 28, 2012 4:08 AM
Subject: Motorcoach for sale

Good Morning,

Thank-you for your reply to my ad listed on Kijiji regarding our Motorcoach for sale.  The price is somewhat negotiable with a slim margin.  The Newmar Essex is a luxury line of motorhomes and it’s condition is outstanding.  This coach has provided us with tremendous comfort and pleasure with it’s convenience in every way.  We have recently purchased a house for our winter retreat and the coach is no longer needed.

Please reply for further information.

Thank-you
---------------

From: Bobby Paul
Sent: Tuesday, November 27, 2012 10:12 AM
Subject: Re: Motorcoach for sale

Thanks for the swift response...I am willing to know the lowest price of it.im out of state presently and please due to the nature of my job and location,i will not be able to come for inspection,am a very busy type as i work long hours everyday,i have gone through your advert and i am satisfied with it.As for the payment..i will be paying you via the fastest and secure way to pay online(PayPal).
I have a private courier agent that will come for the pick up after the payment have been made ...so no shipping included.You can now send me your PayPal email so i can pay in right away and also include your address in your reply.If you don't have a paypal account, you can easily set up one...log on to www.paypal.com and sign up. its very easy. await your reply asap.

Bobby Paul