Friday, June 2, 2017

WARNING: Shamazon and other phony phishing emails















Watch out! In the past few days I have received several totally fraudulent phishing emails pretending to come from shopping sites, like the following one that wound up in my spam folder:

Title: Your order 178-7975-78511 has been successfully canceled

Body: 


order-update@amazon.com [order-update@amazonweller.com]

Today 1:28 PM

Your order has been successfully canceled. For your reference, here’s a summary of your order:

You just canceled order 178-7975-78511 placed on June 1, 2017.

Status: CANCELED

1 “Intervenes”;  2002,  Deluxe Edition
    By: Stacy Armstrong

Sold by:  Amazon .com LLC

Thank you for visiting Amazon.com!



The email referred to an order I never made (and never canceled), for a nonexistent product. It was sent to the email address I use for this blog, which is NOT the address I use when ordering from Amazon. But the English is not as bad as is usual. 

Note that the address it actually came from is NOT that for Amazon.. At the bottom of the body is another link that claims to also go to Amazon, but actually leads to what Firefox labels as an attack site.

Another phony Amazon email came from the outrageous email address of
order-update@amazonwiretapping.com. Two other emails with the same body format claimed to have come from Alibaba Group and eBay.

DO NOT open or reply to any of these emails - just delete them.

UPDATES

June 4 - the latest Shamazon email came from auto-confirm@amazonfrightening.com

June 5 - Today's came from order-update@amazoncaucasians.com 

June 10 - Today there were two.
  One came from order-update @amazondemolish.com 
  and the other from order-update@amazonglazed.com   



No comments: