Scam Got a Scam/Spam or Phish in my junk or normal mail box (Mega Thread)

Malware1

Level 76
Sep 28, 2011
6,557
Title: HMRC - Error in the calculation of your tax‏
Link: "My Refvund" - VirusTotal
Payload (site down): p.exe - VirusTotal

The "My Refvund" shows this before getting redirected to the payload, but the site is no longer up.
View attachment 11122
Code:
Dear Customer :

HM Revenue & Customs has identified an error in the calculation of your tax from the last payment, amounting to GBP 1.400. To return the excess payment, please click the " My Refund" below:

My Refvund

How to return itself, have not changed. Only the format of what you claim and how you get paid back from HMRC has changed digitally. HMRC Department has trouble to return it through the data you give on the Tax application form.

We are here to Ensure the correct tax is paid at the right time, whether this relates to payment of taxes received by the department or entitlement to benefits paid.

Best Regards,
HM Revenue & Customs Department

View email with graphics:

View attachment 11121
This one was available in one of my packs.
 

Ink

Administrator
Verified
Staff Member
Well-known
Jan 8, 2011
21,703
No Apple account for me.

upload_2014-5-21_14-14-56.png
 
  • Like
Reactions: Deletedmessiah

Ink

Administrator
Verified
Staff Member
Well-known
Jan 8, 2011
21,703
Phishing Email: Your Online Access has been temporarily disabled

Suspicious URL: ( some url ) . com/err_log/sub/activate.html

upload_2014-6-19_16-33-9.png
[/COLOR]
 
  • Like
Reactions: Deletedmessiah

Ink

Administrator
Verified
Staff Member
Well-known
Jan 8, 2011
21,703
Title: You have 4 messages that must be viewed
Scam: View 4 messages
Sender: (see image)

upload_2014-12-23_17-52-10.png

 
  • Like
Reactions: _CyberGhosT_

Rishi

Level 19
Verified
Honorary Member
Top Poster
Well-known
Dec 3, 2015
938
Got this phising attempt in one of my junk mailboxes twice, involving PayPal asking me to "continue replacing my security information".It is interesting to note they have used PayPal banner in the email but the link is not only suspicious but redirects to a hosted webpage which looks like a spoofed copy of PayPal without the secure padlock of course!(.php).The scammer does not know I don't use PayPal anyways.:D See below :

Phising Attempt : To continue replacing your security information, click the button

URL redirects to : some url.com..../modules/navigator/auth/

upload_2016-1-18_5-43-39.png


Virustotal scan results: Seems like a new site
upload_2016-1-18_5-38-32.png

Remedial measures taken : Duly reported to paypal ,US-Cert and APWG. :cool:

too bad they don't know I am a MT user.
 

Attachments

  • upload_2016-1-18_5-39-7.png
    upload_2016-1-18_5-39-7.png
    14.6 KB · Views: 974
D

Deleted Member 333v73x

I got something similar on Skype, somebody put in a very long paragraph - somebody with the same second name as me has died and the person who said it claimed he worked for a bank in India trying to find the heir to his millions. It looked very professional (with a VPN obviously) I replied saying can you show me some ID? and then he (in slang and using 'u' instead of 'you') give me your e-mail. I used a masked one and still recieved nothing. I again said give me some ID and he just said give our bank £900 via a P.O Box and then we will tell you where to go and give you the millions you deserve :p

What I did:
  1. Found his IP and sent it to all the authorities I could.
  2. Reported him to Skype.
  3. Blocked him.
Please don't ignore these scammers! People are losing hard earned money because of these false claims, report them!
 

Rishi

Level 19
Verified
Honorary Member
Top Poster
Well-known
Dec 3, 2015
938
FastStoneEditor1.png

Got this scam mail in one of my junk email inbox. As you can see the sender's email is a big hint, secondly I am not subscribed to secret shopper(never heard of it).

Upon checking the email header online at several sites to confirm,we find the source :rolleyes: :

upload_2016-4-2_1-58-23.png


Obviously it is a scam email and has been flagged as phising. The company involved has also been notified.
 
  • Like
Reactions: Deletedmessiah

Morvotron

Level 7
Verified
Mar 24, 2015
307
Ugh, I receive like three or four on my secondary account each week.. It's so pathetic. I mean why would they give you 80 millions dollars? Everybody knows a decent person won't accept less than 100mil.
 
  • Like
Reactions: Rishi

Ink

Administrator
Verified
Staff Member
Well-known
Jan 8, 2011
21,703
Flagged by Spam Filters in Gmail. :)

Dear Sir,

My name is Mr. Fekete Sandor Istvan, I hope my mail meets you in good faith. I work as a sailor executive/ Chief Engineer with JPY Worldwide Shipping Company here in the UK, and i'm usually in the ship almost all the time, JPY Worldwide is a very big company with large services Nationwide.

However, my main aim of contacting you is because my company is about to embark into buying of a Maintenance Oil which is mainly distributed from South East Asia market (Malaysia) for our ship services and maintenance.

I need a reliable individual or friend from any part of the world that can handle this project which will be a one year contract of interval supplies. I have made the necessary researches and arrangement on this transaction. I wish to intimate you into making this supply if you will accept my conditions. I will give you the full information's if i find you interested by replying to me. I have included my email address (<removed>@hotmail.com) so that we can be in contact immediately after you read and understood this summary of supply proposal

I Hope to hear from you soon.

Best Regards,
Mr. Fekete Sandor Istvan
 
  • Like
Reactions: _CyberGhosT_

Kalashnikov

Level 2
Verified
Apr 13, 2016
52
I, too, once or twice I got this e-mail, report it,block and delete.Simple rule of never click on attachments ..:cool:
 
Last edited:

_CyberGhosT_

Level 53
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Aug 2, 2015
4,300
@Huracan
I would have got pissed about the crappy grammar halfway through and deleted this anyway :)
Have you noticed that nearly all spam now appears written by individuals with very poor grammar ?
 
  • Like
Reactions: frogboy

Ink

Administrator
Verified
Staff Member
Well-known
Jan 8, 2011
21,703
Not exactly junk mail, but I stumbled across this a couple months ago. It's quite convincing to destroy the reputation of Qihoo, oh wait, they do that to themselves. :p

upload_2016-4-16_13-54-16.png
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top