Fake: Your Amazon.com Order is Really Phishing and Trojan Virus

11

Posted by Mr Spamalicious | Posted in Computer Virus Spam - Open the Attachment or Follow a Link to Get Infected by a Trojan, Gone Phishing Spam - Identity Theft, Bogus Errors, and Fake Warnings | Posted on 06-23-2010

Very nice work here. These phishing and virus attack scams are getting better all the time. There are getting greedy though. If they made most of the links legitimate but had only the most important ones fake, it would come off as far more legit.

This one takes you to booksalon.kr/index2.html where it tries to install a trojan virus before redirecting you to the infamous Canadian Pharmacy at occurleast.com

fake amazon order email spam

Thanks for your order, clay@claytowne.com

Did you know you can view and edit your orders online, 24 hours a day? Visit Your Account.

Order Information:
E-mail Address: clay@claytowne.com

Order Grand Total: $ 59.99

Earn 3% rewards on your Amazon.com orders with the Amazon Visa Card. Learn More
Order Summary:
Details:
Order #: D80-3421214-0586684
Subtotal of items: $ 62.99
——
Total before tax: $ 33.99
Sales Tax: $ 0.00
——
Total for this Order: $ 82.99


The following item was ordered:

Click here and see items, Price: $ 08.99
By: Click here
Sold by: Amazon Digital Services, Inc.
VN:F [1.8.7_1070]
Rating: 4.8/5 (13 votes cast)
Fake: Your Amazon.com Order is Really Phishing and Trojan Virus4.8513

Comments (11)

We are receiving 20-30 of these fake Amazon emails every day. Send them to ‘stop-spoofing@amazon.com’. They are taking legal action against the web sites and those who host them.

UN:F [1.8.7_1070]
Rating: 3.0/5 (2 votes cast)

Thanks for the link. I sent three already.

UA:F [1.8.7_1070]
Rating: 3.0/5 (1 vote cast)

Thank you for this mail address.
3 phishing mailings June 23 + 3 June 24.

UN:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

I have a client that is infected and spamming out these emials. I cannot get any virus removal to remove the virus. Any idea what the name of the trojan that is installed is?

UN:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

Sorry, I don’t. Have you tried Kasperky. Good program. You can try a free trial here http://usa.kaspersky.com/downloads/trial-versions.php. I would also try AdAware.

UA:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

I have AVG anti virus, and it was able to block the virus before it got installed, maybe it can also cure it.

UN:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

I used AVG for a while after abandoning the bloated, sluggish, resource hog Norton. But AVG was still a little boggy for my tastes so I switched to Kaspersky and found it to be peppier and more accurate than AVG.

UA:F [1.8.7_1070]
Rating: 5.0/5 (1 vote cast)

I’ve noted that with each new batch of these emails, the host site has changed, some of them hiding on otherwise legitimate sites. My guess is that this thing is spreading rapidly – no telling what the trojan is for, but they appear to have big plans.

Also, today the spam/trojan has taken a new form. “Get ready for erotic monday deals.” Same MO, but now I’m guessing it has salacious images for anyone unwary enough to download the blocked images.

UN:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

Yep. Just posted the erotic Mondays one this morning. You can see it http://www.spamdiary.com/2010/06/amazon-com-get-ready-for-erotic-monday-deals-is-a-virus/

UA:F [1.8.7_1070]
Rating: 1.0/5 (1 vote cast)

Thanks for the info, got real suspicious as have no Amazon account, and looked pretty real except for no info of what was ordered, when and from what account…
So it’s not an attack to credit cards or bank account as I see it, “only” virus attacks? Have received around 7 so far but they all go directly to the spamfilter.

UN:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

Damn Canadian chemists.

I must get 5-10 fishing emails a day for various game and MMO sites I used to play and visit. Must be on some sort of massive suckers list which gets passed around to every spammer and scammer under the sun. Been caught out by a few of them, but I thoroughly check all the email details nowadays and often Google or contact the companies to make sure if they’re legit.

UN:F [1.8.7_1070]
Rating: 0.0/5 (0 votes cast)

Write a comment