Scam Got a Scam/Spam or Phish in my junk or normal mail box (Mega Thread)

[Bill K]

Wow, these scammers are getting really lazy! As soon as you see that bogus "App Store" email address as well as the list of addresses it was sent to I don't see how anyone would even consider clicking on the attachment!

 

[codswollip]

as well as the list of addresses it was sent to

Maybe "Brittany" won't notice that oversight

 

[ChemicalB]

Maybe the macromalware is just a dropper and once executed, it can download the malicious executable that would have a higher ratio on VT.

 

[Deleted Member 3a5v73x]

Haven't got any nice attachment in my main inbox lately, however I do receive quite a nice amount of questionable links which may lead to those. By the time I try them links are already dead.

 

[Eddie Morra]

Maybe the macromalware is just a dropper and once executed, it can download the malicious executable that would have a higher ratio on VT.

That would be a logical explanation.

Most of the time, malicious Office VBA Macro's will simply act as an entry to gain code execution on the machine before deploying file-less script attacks or dropping another loader on the environment. Following this, the real payload normally comes into play.

 

[Eddie Morra]

I can try and investigate the attachment for you if you'd like and provide some malware analysis insight. I'm a bit bored these days, it'll spice things up.

Send me the attachment download in a PM - if you don't have it, I'll use the VT link and see if I can find the sample myself.

 

[ForgottenSeer 69673]

I can try and investigate the attachment for you if you'd like and provide some malware analysis insight. I'm a bit bored these days, it'll spice things up.

Send me the attachment download in a PM - if you don't have it, I'll use the VT link and see if I can find the sample myself.

You changed your nickname again? This one is easier to pronounce. The sample is still in my inbox.

 

[ForgottenSeer 69673]

Maybe "Brittany" won't notice that oversight

There was at least 100 other people that it was sent to lol

 

[Dan50]

BitDefender extension blocked it.

 

[tsunami]

it was a sample from last year, the site looks dead.

 

[Slyguy]

 

[tsunami]

oh my bad it isn't...

 

[AtlBo]

Google Safe block. I assume Forticlient or Netcraft would have otherwise...

 

[Ink]

No PayPal account, so this never gets old.

Link: Complete IP Address Details for 202.194.159.244


Full of errors. Can you spot them?

We found your account has been logged with difference devices and locations, we suspect that the party is not responsible've entered your account without you knowing.
[..]
Your account has been limited because we find suspicious activity very fatal. Reviews Please immediately log into your account and fill out all the data we provide to recover your account.

 

[Ink]

Redacted email address for privacy.
URL shortening service removed offending link.

Message Αlert for: [REDACTED]

Your mailbοx may not be functiοning prοperly due to an autοmatic syncing errοr on your email server. This may cause some messages not deliνered to your inbοx, or wrοngly sent to your Junk Εmail fοlder.

To fix this errοr, please take a minute to cοmplete the οne-step manual update of your mailbοx serνer.


UΡDΑTE ΝΟW < [REDACTED URL]>



You will be redirected to your mailbοx to continue with your wοrk, once you have sucessfully cοmpleted the update.


Μicrοsοft Οffice365 Suppοrt
Ρriνacy | Legal Νotices
________________________________


Οffice365 ΑccID : [REDACTED]

This is a system nοtificatiοn. Please DO ΝOT reply as it would not be read.

 

[JB007]

Hello,
Over the past few months I have received more and more spam and in recent weeks I received more spam than emails !
It had become unbearable and I was considering changing my email addresses !
But in the last 4 days I only received 2 spams !
Obviously I am very happy but I would like to understand what happened while hoping that the rain of spam does not start again

 

[TairikuOkami]

You probably have not responded to any spam and you have not tried to unsubscribe proving, that it is your actual email. Or the spammer server might have been taken down.

 

[Dave Russo]

I also was bombarded with spam (I have Yahoo Mail) And was suspicious they were pushing their 60 dollar a year upgrade, which I want no part of right now, kept sending to spam and also blocked sender and maybe it finally worked?? Anyway, Did you do anything differant?

 

[JB007]

Right, I did nothing; only deleted these spam.

 

[ng4ever]

I know if I have to ask it probably is.


AT&T High Speed Internet

Important Message from AT&T

Your account needs immediate attention. Residential customers can log in with your myAT&T user ID and password to be back to browsing the internet as quickly as possible. If you are not registered with myAT&T and a Residential customer, please us at 1-800-286-2020. All Small Business customers must call us at 1-800-321-2000.

To ensure that you reach the right department, it is important that you provide your billing telephone number when prompted.