Cat Forum / Cat Anecdotes / May 2005
OT: "Phishing" Attempts E-mailsLONG
|
|
Thread rating:  |
Hopitus - 06 May 2005 18:57 GMT I'm usually long-winded, but just want to alert any rpca friends to this: during past week I've received 5 (so far)email messages looking authentic like either eBay or PayPal. Telling me log-ons from foreign countries have been going on to my "acount" and threatening to cancel my "acount" unless I go to their provided link and re-enter my "identity" to them for "security reasons". I forwarded some of these to both eBay and PayPal and they responded that *none* of the emails were from them and that unde NO circumstances give the senders any 411 about myself! Well, ROFL, I already knew this simply because I am a strange person and a nonbeliever and have *never* bought anything off of eBay (I went to its website once and thought it was stupid) NOR have I ever had a PayPal account (spelled right by me)! If any of you get these "phishing" emails forward them immediately to eBay or PayPal (whichever they claim to be) as they are investigating the origins of the "phishers". Don't go to the offered link and don't give any info to the "phishers" posing as eBay or PayPal.
wafflycat - 06 May 2005 19:00 GMT > I'm usually long-winded, but just want to alert any rpca friends to this: > during past week I've received 5 (so far)email messages looking authentic > like either eBay or PayPal. Telling me log-ons from foreign countries have > been going on to my "acount" and threatening to cancel my "acount" unless > I go to their provided link and re-enter my "identity" to them for > "security reasons". Not just eBay or PayPal, I've been getting ones purporting to be from banks. Anti-spam takes care of them :-)
Cheers, helen s
dopekitty - 06 May 2005 20:13 GMT >> I'm usually long-winded, but just want to alert any rpca friends to >> this: during past week I've received 5 (so far)email messages looking [quoted text clipped - 7 lines] > > Cheers, helen s If you get the ebay or paypal ones, forward them on to spoof@ebay.com and they will investigate.\
Kristy
EvelynVogtGamble(Divamanque) - 06 May 2005 20:19 GMT >> I'm usually long-winded, but just want to alert any rpca friends to >> this: during past week I've received 5 (so far)email messages looking [quoted text clipped - 5 lines] > Not just eBay or PayPal, I've been getting ones purporting to be from > banks. Anti-spam takes care of them :-) Me too - mostly banks I've never done business with - some of them not even in the U.S.! I get a fair quantity purportedly from Earthlink (my ISP) also. Funny thing though - with spam protection set on high, they all end up in Earthlink's "Suspect E-Mail" file, not my inbox! (And of course, Earthlink keeps cautioning subscribers that any responses to such stuff should be done through the "My Account" page, not by replying to the e-mail!
Magic Mood Jeep© - 06 May 2005 21:19 GMT >> I'm usually long-winded, but just want to alert any rpca friends to >> this: during past week I've received 5 (so far)email messages [quoted text clipped - 7 lines] > > Cheers, helen s No kidding. I do all the bill-paying for my household, and got an email from a company purpoting to be our mortage comany. I went directly to their web site (didn't click on the link provided in the email) and registered a complaint, specifically because I have never registered my email account with them, I pay 90% of my bills via my bank's free online bill-pay service. They replied back to please forward the suspicious email, with complete headers, to them as they had NEVER sent any email out to ANYONE, and they wanted to check into it.
A few weeks later, DH got the same email. I *KNOW* that he never registed his email with the mortgage company, because *I* do all the banking. I gave him the email address to forward it to.
DH even got an email from PayPal, and *he* doesn't have the PayPal acct, *I* do ;)
 Signature The ONE and ONLY lefthanded-pathetic-paranoid-psychotic-sarcastic-wiseass-ditzy former-blonde in Bloomington! (And proud of it, too)© email me at nalee1964 (at) insightbb (dot) com http://community.webshots.com/user/mgcmdjeep
EvelynVogtGamble(Divamanque) - 07 May 2005 19:23 GMT > DH even got an email from PayPal, and *he* doesn't have the PayPal acct, *I* > do ;) OH well, I keep getting them from PayPal, and I have NEVER done business with PayPal!
Norm - 06 May 2005 19:08 GMT > I'm usually long-winded, but just want to alert any rpca friends to this: ...
> the "phishers". > Don't go to the offered link and don't give any info to the > "phishers" posing as eBay or PayPal. Right, never click on links proffered by what seems to be financial institutions, eBay etc. (for that matter I'm suspicious of most embedded links) I'm a heavy user of eBay and PayPal but interestingly many phishing attempts come to IDs that no legitimate institution knows about. And from people who I've never had an account with. Since I posted a couple times recently now I'm getting 100+ spams etc to the xyzzy account, sigh. Time to revert to X-No-Archive: Yes
Another thing I never do is open attachments unless they're benign, like .jpg - certainly not .doc .exe or even .htm ... even jpgs have an exposure even though as yet nobody has used it That I Know Of. Katie opens anything she's not sure of at work :-) YMMV. Alas, nobody pays me to work anymore, my choice BTW Norm
-- "The web has got me caught. I'd rather have the blues than what I've got." <via Nat King Cole>
Smokie Darling (Annie) - 06 May 2005 19:12 GMT > X-No-Archive: Yes > [quoted text clipped - 21 lines] > "The web has got me caught. I'd rather have the blues than what I've > got." <via Nat King Cole> Actually, your email is unmunged, so the "bots" are picking it up as soon as it hits Google. Non-archiving won't change that. I have this "bogus" email account just for Google, so the spam doesn't bother me, but I am getting those phishing emails to this account (it's never been used for anything else than Google).
Smokie Darling (Annie)
Norm - 06 May 2005 19:45 GMT > Actually, your email is unmunged, so the "bots" are picking it up as > soon as it hits Google. Non-archiving won't change that. I have this > "bogus" email account just for Google, so the spam doesn't bother me, > but I am getting those phishing emails to this account (it's never been > used for anything else than Google). I don't think the bots are watching Google, tho I'm willing to be convinced. It's only the last few days, since I started reading n' posting again, that I've seen the big increase. In any event, it's easy enough to "show all" and scan to see if a legitimate user has sent mail - tho that did trap me this AM when I received mail from "Julie" who I'd responded to yesterday here. This Julie however had something else on her mind, heh. Norm -- "The web has got me caught. I'd rather have the blues than what I've got." <via Nat King Cole>
Smokie Darling (Annie) - 06 May 2005 20:21 GMT > > Actually, your email is unmunged, so the "bots" are picking it up as > > soon as it hits Google. Non-archiving won't change that. I have this [quoted text clipped - 13 lines] > "The web has got me caught. I'd rather have the blues than what I've > got." <via Nat King Cole> So, out of ignorance on my part, are non-archived posts not sent through usenet? If the bots are "out there", which I would think they'd have to be when one considers what's being sent to my barnabus account, perhaps they are on usenet (of which I know little) rather than on Google.
Smokie Darling (Annie) - who adores that the spammers think she is a guy needs a bigger dick (no offence, but my DH can be, on occasion, a big enough one without any assistance, and we aren't talking physical endowments).
Norm - 06 May 2005 20:54 GMT > So, out of ignorance on my part, are non-archived posts not sent > through usenet? If the bots are "out there", which I would think > they'd have to be when one considers what's being sent to my barnabus > account, perhaps they are on usenet (of which I know little) rather > than on Google. <regretfully snipped last paragraph :- ) Terminology: notes are sent on the Net as SMTP, all Usenet posts as NNTP. Usenet isn't a net, rather another application on the Net.
That's what I believe, that the harvesting is done from a news-server, and why X-No-Archive may be limiting the harvest I don't know specifically but it seems to be the case, presumably because of the volume. Just assuming (you know what that means). I've been posting to Usenet and using Arpanet/Internet since the 80s (not a big deal, I worked with a guy who'd been on Arpanet since 1974!) and was a Fortune 500's postmaster, which just says I had to wing it a lot. Phishing and all of the web came along after I retired as an employee. Norm (then I worked on an anti-hacker team)
-- "The web has got me caught. I'd rather have the blues than what I've got." <via Nat King Cole>
John F. Eldredge - 07 May 2005 02:20 GMT >So, out of ignorance on my part, are non-archived posts not sent >through usenet? If the bots are "out there", which I would think >they'd have to be when one considers what's being sent to my barnabus >than account, perhaps they are on usenet (of which I know little) rather >on Google. Non-archived posts are sent through USENET, but have a special header requesting that archive sites, such as Google, not add this particular message to their archives. Unfortunately, there is nothing to keep any archive site, or for that matter any address-gathering system that a spammer may be running, from ignoring the request and saving the message anyway.
USENET is the collection of machines that redistribute the newsgroups. The simplest way to visualize this is as a set of bulletin boards; when you stick a note onto one of the bulletin boards, it is automatically copied to all of the other boards that carry that particular newsgroup.
Archives such as Google simply save all of the messages long-term, except for those containing a header asking that the message not be archived, instead of discarding messages after a period of time in order to make room for new messages.
 Signature John F. Eldredge -- john@jfeldredge.com PGP key available from http://pgp.mit.edu "Reserve your right to think, for even to think wrongly is better than not to think at all." -- Hypatia of Alexandria
Seanette Blaylock - 07 May 2005 03:58 GMT "Smokie Darling (Annie)" <Barnabus1993@yahoo.com> had some very interesting things to say about Re: OT: "Phishing" Attempts E-mailsLONG:
>Smokie Darling (Annie) - who adores that the spammers think she is a >guy needs a bigger dick (no offence, but my DH can be, on occasion, a >big enough one without any assistance, and we aren't talking physical >endowments). Yours too? :-)
 Signature "The universe is quite robust in design and appears to be doing just fine on its own, incompetent support staff notwithstanding.
:-)" - the Dennis formerly known as (evil), MCFL Smokie Darling (Annie) - 07 May 2005 20:49 GMT > "Smokie Darling (Annie)" <Barnabus1993@yahoo.com> had some very > interesting things to say about Re: OT: "Phishing" Attempts [quoted text clipped - 6 lines] > > Yours too? :-) Well, ya know, DH is generally the sweetest most wonderful guy, but on occasion... I think it's safe to say here that I occasionally have 6'1" (approx 1.86 meters) prick running around.
Smokie Darling (Annie) - which isn't to say he isn't entitled to act in such fashion. We both have "free" days, and we know when they are.
Christina Websell - 06 May 2005 22:19 GMT >> Actually, your email is unmunged, so the "bots" are picking it up as >> soon as it hits Google. Non-archiving won't change that. I have this [quoted text clipped - 9 lines] > responded to yesterday here. This Julie however had something else on > her mind, heh. Norm I'm being bothered by this "Julie" too. Although I have "blocked sender" twice, she still just got through on another addy. <sigh> She is wasting her time with me. <g>
Tweed
Yowie - 08 May 2005 00:54 GMT >>> Actually, your email is unmunged, so the "bots" are picking it up as >>> soon as it hits Google. Non-archiving won't change that. I have this [quoted text clipped - 13 lines] > twice, she still just got through on another addy. <sigh> > She is wasting her time with me. <g> yeah, I've got alot from Julie too. Unfortunatley, I opened the first one, thinking it was the Julie here.
Yowie
Ted Davis - 07 May 2005 02:47 GMT >Another thing I never do is open attachments unless they're benign, like >.jpg - certainly not .doc .exe or even .htm ... even jpgs have an >exposure even though as yet nobody has used it That I Know Of. Katie >opens anything she's not sure of at work :-) YMMV. Alas, nobody pays me >to work anymore, my choice BTW Norm It should be kept in mind that Microsoft e-mail clients will lie to you about what the filename extension is unless specifically told not to. Recent upgrades help, but the default is still near maximum risk. If your client is vulnerable, the fact that it is showing *any* extension is a cue that the real one has been suppressed. As far as I know, *only* Microsoft applications are vulnerable - no other e-mail client that I have evaluated will hide the real extension.
 Signature T.E.D. (tdavis@gearbox.maem.umr.edu)
Smokie Darling (Annie) - 06 May 2005 19:10 GMT > I'm usually long-winded, but just want to alert any rpca friends to this: > during past week I've received 5 (so far)email messages looking authentic [quoted text clipped - 14 lines] > Don't go to the offered link and don't give any info to the > "phishers" posing as eBay or PayPal. And be aware that some of these emails are purported to have spyware in them (so far, touch wood, I haven't come across one, but my bank IT department said to close my IE window and run a spyware scan whenever I open, inadvertently, an email I think my be from phishers).
Even your local banks are beginning to be phished, as well as credit cards. No REPUTABLE institution is going to ask for information via email. I've received several emails purporting to be from my bank (a Nationally recognized bank) saying that my account had been "hacked", blah, blah, blah... I called my bank and they are currently going after the person who tried it.
I suppose I'm lucky in that my momma didn't raise no fools (as it appears did yours). In fact, when I get letters from my bank, I go to their office and deal with it, I won't even conduct that over the phone.
Smokie Darling (Annie) - such a suspicious person...
Seanette Blaylock - 07 May 2005 03:59 GMT "Smokie Darling (Annie)" <Barnabus1993@yahoo.com> had some very interesting things to say about Re: OT: "Phishing" Attempts E-mailsLONG:
>I suppose I'm lucky in that my momma didn't raise no fools (as it >appears did yours). In fact, when I get letters from my bank, I go to >their office and deal with it, I won't even conduct that over the >phone. I'll deal with my own bank by phone, if *I* placed the call. I wouldn't do so if they had called me, but would end the call and call them back via the number on my ATM card.
 Signature "The universe is quite robust in design and appears to be doing just fine on its own, incompetent support staff notwithstanding.
:-)" - the Dennis formerly known as (evil), MCFL John F. Eldredge - 07 May 2005 14:44 GMT >"Smokie Darling (Annie)" <Barnabus1993@yahoo.com> had some very >interesting things to say about Re: OT: "Phishing" Attempts [quoted text clipped - 8 lines] >wouldn't do so if they had called me, but would end the call and call >them back via the number on my ATM card. A couple of months ago, I received a call that claimed to be from one of the banks I have a credit card from. The call stated that it was from the security department, and they were concerned about a "convenience check" that had just been submitted for payment. They gave me a phone number to call back to, and stated that I should have my credit card number ready when I called.
I was suspicious, and so looked up the number and called back, rather than calling the number given in the message. The actual security department said that they hadn't placed any such call, and that my account didn't show any recent activity. Apparently, this call was from a scammer trying to get my credit card number.
I had come into the room as the answering machine was recording the call, and so heard the entire message. When I tried to play it back for the bank's security person to hear, however, the message ended after a few seconds, with a beep. Apparently the scammer had sent a tone that made the answering machine stop recording, probably making the machine think that the caller had hung up.
 Signature John F. Eldredge -- john@jfeldredge.com PGP key available from http://pgp.mit.edu "Reserve your right to think, for even to think wrongly is better than not to think at all." -- Hypatia of Alexandria
Yowie - 08 May 2005 01:03 GMT > "Smokie Darling (Annie)" <Barnabus1993@yahoo.com> had some very > interesting things to say about Re: OT: "Phishing" Attempts [quoted text clipped - 8 lines] > wouldn't do so if they had called me, but would end the call and call > them back via the number on my ATM card. I do that with my phone company as well.
Its starts with "Hello, this is xxxxxx from Telstra, can I speak to Mrs Victoria Chapman, please"
I reply "Speaking"
"Oh, good <time of day> Mrs Chapman, I"m just calling to make sure you are getting the most value of your account. Before I start, I just need your account number and birth date for security reasons"
At that point, I kindly alert them to the fact I have no idea whether they are who they say they are or not, and would they give their identifying information to a stranger. Most are quite understanding, and tell me to ring Telstra back at any time, but some get quite offended. I am failry certain they *are* from Telstra (or at least, froma call centre employed by Telstra) but I really can't be sure, and the last thing I need is my telephone acount hijacked. I have aleady had one of my credit cards 'hacked' - thankfully the financial provider believed me when I said I had never bought overseas internet porn in my life, and had no intention of starting, but I had to change not only cards but *accounts* to get them off my back. I don't have the time to deal with that sort of thing any more.
Yowie
William Hamblen - 08 May 2005 14:36 GMT >"Oh, good <time of day> Mrs Chapman, I"m just calling to make sure you are >getting the most value of your account. Before I start, I just need your >account number and birth date for security reasons" "Don't you know that already?"
"Goodbye".
Smokie Darling (Annie) - 07 May 2005 15:53 GMT > > I'm usually long-winded, but just want to alert any rpca friends to > this: > < <snipped> > bank and they are currently going
> after the person who tried it. > > I suppose I'm lucky in that my momma didn't raise no fools (as it > appears did yours). In fact, when I get letters from my bank, I go to > their office and deal with it, I won't even conduct that over the > phone. You know, I am re-reading this this morning... Maybe I just need more coffee, but it "sounds" like I am saying your mom raised a fool, and I didn't mean that (I hope it's just reading that way 'cause I'm tired). I was trying to say that it seems "our" momma's didn't raise any fools.
Smokie Darling (Annie) - who should read more carefully what she writes...
Irulan - 06 May 2005 22:50 GMT Along this thread, both PAYPAL and EBAY say that if you receive an email that is says: Dear ebay User or Dear Paypal user you can be sure it is 'phishing' or a scam. If either Ebay or Paypal send you an authentic email it will be addressed to your REAL name and will never ask for your id or password. Jazz's mama
 Signature Irulan from the stars we come to the stars we return from now until the end of time
> I'm usually long-winded, but just want to alert any rpca friends to this: > during past week I've received 5 (so far)email messages looking authentic [quoted text clipped - 14 lines] > Don't go to the offered link and don't give any info to the > "phishers" posing as eBay or PayPal. Dan M - 06 May 2005 23:13 GMT > I'm usually long-winded, but just want to alert any rpca friends to this: > during past week I've received 5 (so far)email messages looking authentic > like either eBay or PayPal. Telling me log-ons from foreign countries have > been going on to my "acount" and threatening to cancel my "acount" unless I > go to their provided link and re-enter my "identity" to them for "security > reasons". I've been receiving 3 or 4 of these a day for the last couple of months. I've reported a good number of them to PayPay and eBay, but have recently stopped just due to the large number of them.
> Don't go to the offered link and don't give any info to the > "phishers" posing as eBay or PayPal. Excellent advice!
Dan
L. (usenetlyn) - 06 May 2005 23:52 GMT > I'm usually long-winded, but just want to alert any rpca friends to this: > during past week I've received 5 (so far)email messages looking authentic > like either eBay or PayPal. I just delete anything from anyone who isn't already in my address book. If someone who isn't wants to contact me, they can do it via a ng or some other means. Everyone who knows me knows my *real* email address, and if they don't, they shouldn't be emailing me without my permission, anyway. :)
-L.
Bev - 07 May 2005 00:07 GMT > > I'm usually long-winded, but just want to alert any rpca friends to > this: [quoted text clipped - 9 lines] > > -L. I've been getting emails from most of the above unwanted list - i.e. ebay, paypal, various banks, get rich quick schemes from Nigeria (some of those are quite entertaining) I just delete them all. I also get porn which is pretty revolting. I think the porn came from a time when I was getting formation for our US trip and posted stuff on a Las Vegas newsgroup. I suspect they do get our addys from the newsgroups.
My server has anti spam software but I notice the ones that get through are made up as if they are from personal friends!! i.e. Eileen says Hi.
If I was getting too much spam I'd probably use a hotmail addy for newsgroups. I can remember a time before the server got the anti spam software, that I was getting around 60 spam emails a day, arghhhhhhhhhhhhhhh. But when the new software kicked in that stopped.
Bev
 Signature Cats aren't clean, they're just covered with cat spit.
cathy - 07 May 2005 08:54 GMT > I'm usually long-winded, but just want to alert any rpca friends to this: > during past week I've received 5 (so far)email messages looking authentic [quoted text clipped - 14 lines] > Don't go to the offered link and don't give any info to the > "phishers" posing as eBay or PayPal. Best thing I found for anti-spam is a site called www.mailinator.com. Its a *free* service that allows you to create a 'dummy' email address to receive anything you like (especially if you are worried about getting spam). You can use it to register for one-off things that require you to click on a link, give you a password, etc. to get started. No normal email can be sent from this account, so nothing that is sent to you at this address can inadvertantly be sent on to other poor suckers. It only receives stuff. They automagically clean it out after a few days, so you don't have to worry about it. Very clever, very useful. Go check it out. It was created by a guy that was all 'spammed-out', and decided to do something about it. Cheers Cathy
hobbs - 11 May 2005 13:58 GMT I keep getting those damn things and like you have never had an eBay or PayPal acc; and have never even visited one of those sites, so like you I guessed they were fake, so I've just been deleting them along with all the other spam. Jean.P.
> > I'm usually long-winded, but just want to alert any rpca friends to this: > > during past week I've received 5 (so far)email messages looking authentic [quoted text clipped - 28 lines] > Cheers > Cathy Adrian - 12 May 2005 17:23 GMT > I keep getting those damn things and like you have never had an eBay > or PayPal acc; and have never even visited one of those sites, so > like you I guessed they were fake, so I've just been deleting them > along with all the other spam. Jean.P. I get those as well as phishing emails purporting to come from US banks, whom I'm sure wouldn't open an account for someone living in Burope.
 Signature Adrian (Owned by Snoopy & Bagheera) A house is not a home, without a cat.
Caroline S. - 12 May 2005 18:35 GMT I had to laugh as I just received a phishing email today from a "bank" I have never had an account with, where the e-mail was riddled with mispellings. How stupid do they think I am?
I forwarded the mail to reportphishing@antiphishing.com, spam@uce.gov
and to the "abuse" and "spoof" addresses of the supposed legitimate bank.
Sorry if someonelse already posted this: http://www.antiphishing.org/consumer_recs.html
-Caroline S.
<snip>
polonca12000 - 12 May 2005 22:31 GMT Thanks for the link, it's very informative. Best wishes,
 Signature Polonca & Soncek
> I had to laugh as I just received a phishing email today from a "bank" > I have never had an account with, where the e-mail was riddled with [quoted text clipped - 11 lines] > > <snip> Hopitus - 14 May 2005 19:52 GMT Yes, they *do* think we're either stupid or won't notice their *bad* English spelling mistakes! Forward your "phishing" emails to eBay or PayPal and I think the more forwarded the more likely businesses will seek origins of these emails. BTW, I *really* feel like one of the "in-crowd" now....just got a long-winded plea for $ assistance (he wants to trust Hopitus w/his big bucks) from some dude in Zimbabwe! ROFLMAO @ nerve and idiocy (is there such a word?) of these guys.
> Thanks for the link, it's very informative. > Best wishes, [quoted text clipped - 13 lines] >> >> <snip>
|
|
|