[SECURITY ALERT] - Fake Email

[zolympus]

Utk pengguna Paypal, hari ni aku terima email dari phishing site, dan mengaku ia datang dari Paypal. Seperti biasa, jangan klik sebarang link dari email, tetapi terus masuk ke Paypal sekiranya ingin membuat urusniaga / update account.

Diorang ni memang deserve my hall of shame this month. Apa tu phishing? Phishing is the act, to imitate the original site but hence, do more harm than good. It is an evil site afterall, and their purpose is to steal your login and password.

AMARAN ! Do not fall into their trap.

Seperti biasa, kita check email header;

X-Gmail-Received: 9e6875183f6dc2323fb3f5ce99cdcd277f491f5d
Delivered-To: [email][email protected][/email]
Received: by 10.67.90.6 with SMTP id s6cs122420ugl;
        Thu, 18 May 2006 11:05:05 -0700 (PDT)
Received: by 10.70.77.7 with SMTP id z7mr956201wxa;
        Thu, 18 May 2006 11:05:05 -0700 (PDT)
Return-Path: <[email protected]>
Received: from maglobe.net (maglobe.net [72.3.137.226])
        by mx.gmail.com with ESMTP id h17si1208982wxd.2006.05.18.11.05.05;
        Thu, 18 May 2006 11:05:05 -0700 (PDT)
Received-SPF: neutral (gmail.com: 72.3.137.226 is neither permitted nor denied by best guess record for domain of [email][email protected][/email])
Received: from p76 [58.65.221.220] by maglobe.net with ESMTP
  (SMTPD-8.20) id A74F11F4; Thu, 18 May 2006 11:05:03 -0700
Message-Id: <[email protected]>
From: "Paypal Billing" <[email protected]>
Subject: Paypal Acount Update
To: [email][email protected][/email]
Content-Type: text/html;iso-8859-1
Reply-To: [email][email protected][/email]
Date: Thu, 18 May 2006 12:05:04 -0600
X-Priority: 3
X-Library: Indy 8.0.25

Ia datang dari From: "Paypal Billing" <[email protected]> dan bukannya dari Paypal :!: Jangan lihat pada "Paypal Billing" tapi lihat pada [email protected] :!: Jadi, ia sebenarnya bukan datangnya dari Paypal sendiri.

Kandungan email;

Dear PayPal Customer:

It has come to our attention that your PayPal billing updates are out of order. If you could please take 5-10 minutes out of your online experience and update your billing records you will not run into any future problems with the online service. However, failure to update your records will result in account termination. Please update your records before 1th.

If you are the rightful holder of the account you must click the link below and then complete all steps from the following page as we try to update your account billing records.

Click here to verify your account

Once you have updated your account records your PayPal session will not be interrupted and will continue as normal.

Thank you for using PayPal!

The PayPal Team

PayPal Email ID PP738

Kat "Click here to verify your account" tu, dia link ke sini

AMARAN !! Jangan klik ke link di atas sekiranya anda tidak tahu apa yg perlu dilakukan. Aku sama sekali tidak bertanggungjawab atas apa yg terjadi. Tujuan link di atas disediakan, utk mereka yang berminat utk mengkaji kes ini; basically means utk IT savvy only.

Aku dah tukar ke http ke hxxp, just in case kalau ada yg ter'klik'. If you are IT savvy enough, you know how to get the meant website. If not, stay away from this site, and don't click any link at all.

 

[hoop_busta]

dude..hang ni terer ar..hang ni hacker ker..leh ajar aku x..hehehe serius ni..

 

[misztake]

ishk.. skrg paypal pulak yg diorang target..
paypal user kena hati2 la..

 

[adamma]

Ari ni aku terima lak Fake Email dr Paypal. Dia tulis cam ni..

Dispute Transaction
Monday, 3 November, 2008 20:27
From:
"PayPal" <[email protected] PayPal.Inc.com>
Add sender to Contacts
To:
undisclosed-recipients

Dear PayPal Member,


This email confirms that you have paid ResearchAnyone.com $219.95 USD using PayPal.
This credit card transaction will appear on your bill as "PAYPAL *RESEARCHANY".


--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Payment Details

Transaction ID: 20433666FG486722N
Total: $219.95 USD
Item/Product Name: Comprehensive Expert Detective Informational Software
Item/Product Number: 922-116
Buyer: Nancy L Cornell

--------------------------------------------------------------------------------


Business Information

Business: ResearchAnyone.com
Contact E-Mail: [email protected] researchanyone.com

--------------------------------------------------------------------------------
Receipt Number: 0010-8715-4422-2518



Note:


If you haven't authorized this charge ,click the link below to dispute transaction
and get full refund

Dispute Transaction (Encrypted Link )Link ini(http: //85.10.17.240/ www. paypal. com/ cgi-bin/webscr=cmd=p/ index. php)

*SSL connection:
PayPal automatically encrypts your confidential information
in transit from your computer to ours using the Secure
Sockets Layer protocol (SSL) with an encryption key length
of 128-bits (the highest level commercially available)



Keep your Receipt Number (shown above) for future reference. You will need to refer to this number if you need customer service from ResearchAnyone.com or from PayPal.

If you have questions about your purchase, such as shipping and tracking, we encourage you to contact the seller, ResearchAnyone.com at sales @researchanyone.com.

If you have been unable to resolve your questions with the merchant, PayPal offers a free buyer complaint resolution service that offers a quick, easy resolution to your concerns. It covers physical goods purchases made through PayPal, and is offered at no charge when you register for a free PayPal account. To sign up for an account, click on the 'Save My Info' link above.

Thank you for using PayPal!
The PayPal Team


Please do not reply to this email. Email sent to this address cannot be answered.




PayPal Email ID PP344

so sape yg terima tu, hati2, jgn tekan link tu.

 

[ammal07]

betulke admin carigold hantar email ni,bila scan ada virus..


From:
"admin" <[email protected]>
Add sender to Contacts
To:
[email protected]
Message contains attachments
DSC-00465.pIf (95KB)
forwarded message attached.

 

[sky]

betulke admin carigold hantar email ni,bila scan ada virus..


From:
"admin" <[email protected]>
Add sender to Contacts
To:
[email protected]
Message contains attachments
DSC-00465.pIf (95KB)
forwarded message attached.

siap guna domain cg tu.. xleh trust sgt sbb tu smua boleh dibuat.
tgk kat full header utk tau sender yg sebenar.

 

[vedder9]

Hari nie aku dpt email nie plak...
Yang best..aku mana pernah buka account Liberty Reserve

Dear Liberty Reserve member,


You have been sent a transfer of 1392 USD from Liberty Reserve account U3983977. However, in accordance to our newly modified Security Policy, valid from today, 26th May 2009, you are required to confirm your identity before you can receive transfer spends of a sum over 1000 USD. This is done to further strenghten the safety of our members and minimize the possibility of a fraudulent transaction.

Please click on the link below to be taken to the page where you will confirm your ownership of your Liberty Reserve account and receive the transfer spend. Fill out all the fields and press the "Confirm" button. Your submitted data will be sent to our Support team and processed MANUALLY. A few hours later you will be sent an email confirmation and the balance of your Liberty Reserve account will be reflected with the receipt of the 1392 USD.

The above process is a one-time verification of your ownership of your Liberty Reserve account and you will not be required to authenticate yourself once you have successfully completed the process.

Note: Bear in mind that, due to security reasons imposed by our new Policy, the spend will not be credited to your account until you confirm your identity.



CONFIRM YOUR ACCOUNT WITH LIBERTY RESERVE HERE:


https://www.libertyreserve.com/en/customer/confirm/verify.aspx



For information and support please e-mail us at [email protected]

Thank you.

 

[gOdFeLLa]

Gmail Phising Acct


Berhati2 dengan email macam ni... dorang nak curi password gmail acct.

Dear Gmail Members,

This letter is to confirm that you ask us to remove Your Account from Googlemail database, We want to give you that last chance. We want to make sure that you want to delete your Gmail from database. If this request is not from you and cancel the deletion, please re-login you do use the link below :

Cancel the Gmail account closure

<http://gmail.updeta.com****/?ServiceLogin.htm/[email protected]/cancel-deletion/secure.aspx>

And Please leave this letter if you truly want to delete Your Gmail. Your Gmail will automatically Removed within 7 days.

Sincerely,

Gmail Team

 

[vc2216]

Perrgh! hacker ni mmg nak melingkup pc & laptop org jer..
thanks for u guys deliver info..cepat.padat.mantop! syabass bete..
well done..jasa muu di konang

 

[mozan]

Tolong CGarians semua, ni email ni betul ker dari LR? was2 jg nak click link tu sebab try masuk LR guna website nyer OK jer, sebelum ni ada jg kena tukar password semua sebab ada intruder nak kacau, ni dpt email ni pulak, ada sesiapa dpt email yg sama ke?

TQ


Dear LibertyReserve member,



Liberty Reserve is constantly working to ensure security by regularly screening the accounts in our system. Our security department detected an IP access associated with your account indicating your account could be at risk. This is most likely due to keyloggers, trojans, viruses or some type of malware on your computer. We would like to restore your access as soon as possible, and we apologize for the inconvenience.

========================================================================================
We have reason to believe that your account was accessed by a third party. We have limited access to sensitive Liberty Reserve account features in case your account has been accessed by an unauthorized third party. We understand that having limited access can be an inconvenience, but protecting your account is our primary concern.

========================================================================================
Please log in to your Liberty Reserve account using our secure server and update your account details:

Click Here or the link below to validate your account information :

https://www.libertyreserve.com/en/customer/login2/index.aspx


========================================================================================

Please note:
If we do not receive the appropriate Account Verification within 48 hours , we will
assume that this Liberty Reserve Account is fraudulent and it will be suspended. The
purpose of this Verification is to ensure that your account has not been
fraudulently used and to combat fraud from our Community.


========================================================================================
© Copyright 2001-2009 Liberty Reserve S.A. All Rights Reserved