OT: Even More Proof

[jeffel]

This is classic.

I recently got a very similar one which I thought was pretty slick.

It looked like it came from my ISP.

The text read something like

Our Virus filters have detected a large number of viruses coming from your account.

Please download the <link> virus checker availiable for free from Earthlink.

I still wonder how many unsuspecting fools they caught with that one.

---
The other one I really liked was the one that purported to be from the FBI. It said I was being investigated and that I should open the attached file for information on why.

In the attachment window of my mail reader it looked like the name was "Indictment.txt".

Curious as to what was being attempted, I looked deeper. The name was "Indictment.txt" followed by about 100 instances of a blank character (not space) and then a .exe

I do have to wonder how many people are still being fooled by these.

[Atrocities]

My mother fell for it. I spent several hours fixing it aftwards. Not good.

[Kamog]

I recently got this one.

The link for "Click here for confirmation of the your account" goes to a suspicious url: "http://218.12.184.39/icons/.signin.ebay.com/ws/eBayISAPIdllSignIn.php".

Date: Mon, 25 Apr 2005 02:41:24 +0800
Subject: eBay: Notification!
From: "Administrator" <user@isp.com>

Dear eBay Customer!

You have received this email because you or someone had used your account to make fake bids at eBay. For security purposes, we are required to open an investigation into this matter.To help speed up this process, please access the following form to complete the verification of your eBay account registration informations:
Click here for confirmation of the your account

Please Note:
If we do not receive the appropriate eBay account verification within 48 hours, then we will assume this eBay account is fraudulent and will be suspended.
The purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat the fraud from our community.
We appreciate your support and understanding, as we work together to keep eBay a safe place to trade.
Thank you for your patience in this matter.
Regards, Safeharbor Department (Trust and Safety Department)
eBay Inc.
Please do not reply to this e-mail as this is only a notification.


Copyright © 2005 eBay Inc. All Rights Reserved.

[Jack Simth]

Kamog said:
I recently got this one.

The link for "Click here for confirmation of the your account" goes to a suspicious url: "http://218.12.184.39/icons/.signin.ebay.com/ws/eBayISAPIdllSignIn.php".

Here's a fun site for looking up such links: Kloth.Net; a WhoIs on 218.12.184.39 told me that the IP is owned by Asia Pacific Network Information Centre. Running it on arribada.ebay.com said "not found"

Interesting, no?

[bearclaw]

jeffel said:
I do have to wonder how many people are still being fooled by these.

LOTS. My job is IT support for an entire real estate board (approx 600 realtors). I don't think a day goes by where someone has messed up their computer with some sort of scam that they fell for. Luckly, I only have to do direct support for about 100 realtors. The rest are too far for me to travel to.