Fake: Your Amazon.com Order is Really Phishing and Trojan Virus

14

Posted by Mr Spamalicious | Posted in Computer Virus Spam - Open the Attachment or Follow a Link to Get Infected by a Trojan, Gone Phishing Spam - Identity Theft, Bogus Errors, and Fake Warnings | Posted on 06-23-2010

Very nice work here. These phishing and virus attack scams are getting better all the time. There are getting greedy though. If they made most of the links legitimate but had only the most important ones fake, it would come off as far more legit.

This one takes you to booksalon.kr/index2.html where it tries to install a trojan virus before redirecting you to the infamous Canadian Pharmacy at occurleast.com

fake amazon order email spam

Thanks for your order, clay@claytowne.com

Did you know you can view and edit your orders online, 24 hours a day? Visit Your Account.

Order Information:
E-mail Address: clay@claytowne.com

Order Grand Total: $ 59.99

Earn 3% rewards on your Amazon.com orders with the Amazon Visa Card. Learn More
Order Summary:
Details:
Order #: D80-3421214-0586684
Subtotal of items: $ 62.99
——
Total before tax: $ 33.99
Sales Tax: $ 0.00
——
Total for this Order: $ 82.99


The following item was ordered:

Click here and see items, Price: $ 08.99
By: Click here
Sold by: Amazon Digital Services, Inc.
VN:F [1.9.17_1161]
Rating: 4.8/5 (14 votes cast)
Fake: Your Amazon.com Order is Really Phishing and Trojan Virus, 4.8 out of 5 based on 14 ratings

Comments (14)

We are receiving 20-30 of these fake Amazon emails every day. Send them to ‘stop-spoofing@amazon.com’. They are taking legal action against the web sites and those who host them.

VA:F [1.9.17_1161]
Rating: 3.0/5 (2 votes cast)

Thanks for the link. I sent three already.

VN:F [1.9.17_1161]
Rating: 4.0/5 (2 votes cast)

Thank you for this mail address.
3 phishing mailings June 23 + 3 June 24.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

I have a client that is infected and spamming out these emials. I cannot get any virus removal to remove the virus. Any idea what the name of the trojan that is installed is?

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

Sorry, I don’t. Have you tried Kasperky. Good program. You can try a free trial here http://usa.kaspersky.com/downloads/trial-versions.php. I would also try AdAware.

VN:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

I have AVG anti virus, and it was able to block the virus before it got installed, maybe it can also cure it.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

I used AVG for a while after abandoning the bloated, sluggish, resource hog Norton. But AVG was still a little boggy for my tastes so I switched to Kaspersky and found it to be peppier and more accurate than AVG.

VN:F [1.9.17_1161]
Rating: 5.0/5 (1 vote cast)

I’ve noted that with each new batch of these emails, the host site has changed, some of them hiding on otherwise legitimate sites. My guess is that this thing is spreading rapidly – no telling what the trojan is for, but they appear to have big plans.

Also, today the spam/trojan has taken a new form. “Get ready for erotic monday deals.” Same MO, but now I’m guessing it has salacious images for anyone unwary enough to download the blocked images.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

Yep. Just posted the erotic Mondays one this morning. You can see it http://www.spamdiary.com/2010/06/amazon-com-get-ready-for-erotic-monday-deals-is-a-virus/

VN:F [1.9.17_1161]
Rating: 1.0/5 (1 vote cast)

Thanks for the info, got real suspicious as have no Amazon account, and looked pretty real except for no info of what was ordered, when and from what account…
So it’s not an attack to credit cards or bank account as I see it, “only” virus attacks? Have received around 7 so far but they all go directly to the spamfilter.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

Damn Canadian chemists.

I must get 5-10 fishing emails a day for various game and MMO sites I used to play and visit. Must be on some sort of massive suckers list which gets passed around to every spammer and scammer under the sun. Been caught out by a few of them, but I thoroughly check all the email details nowadays and often Google or contact the companies to make sure if they’re legit.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

I just got a message that says my Amazon.com order for a book that I ordered today has been cancelled. It gives a live link to the order number and appears in all reapsects to be genuine. I of course have not ordered anything from Amazon today, but checked my account just in case — nothing there. I’m positive this is another form of spam that will install a virus if the link is followed.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

That’s the one I’ve been trying to look into, I got it on my iPhone, when you read them on there they tend to look super fake as there are no amazon headers, just plain typewriter style text and a link to an order I know I didnt place because I dont have an amazon. Wondering if It would infect an apple/Mac based product because if you can’t that’d be the key to checking all this out, I called amazon today and the lady got kind of snotty with me saying they’re investigating it, well I’m sorry I called with a stupid issue that if I’d have dug deeper I maybe might have seen the notice for but it’s so hidden you have to stumble upon it on accident, or by the luck of google search. But I don’t know the website because I don’t ever use it.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

Got an email today from amazon.com saying that my order of a “GoPro Helmet Cam” had been shipped! And that my Visa card had been charged… At first I blamed my husband (because it happens to be something that has been on his wish list for a long time!) but when I click on the link in the email, my anti-virus software kicks in and blocks it (probably a good thing)… I will pass this one along to the anti-spam folks at amazon.com – thanks for the tip.

VA:F [1.9.17_1161]
Rating: 0.0/5 (0 votes cast)

Write a comment

Powered by sweetCaptcha