ISP Alerts
The following email messages are examples of actual email phishing scams or attempts to deliver a virus via email. Most of these examples appear to have been sent by your Internet Service Provider (ISP).
You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar
credit card or bank.
If you do receive one of the following emails or a similar email message
in your inbox, please avoid opening any attachments and delete
the email.
NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample ofthe large amount of scam emails that are circulating.
NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of
12/11/16 Malicious Links
<http://maliciouslink.com/applications/cnbc.com/resources/img/editorial/2013/01/29/100417547-amazon-logo-on-ipad-gettyp.530x298.jpg?v=1361820315> Amazon Payments Customer Service
Dear Amazon Customer:
This email was sent by the Amazon server. your order has been suspended , because we are unable to verify your payment details please Verify that you entered your payment information correctly on your order You have successfully used the payment method on a previous order Part of your order has already charged and shipped successfully You have funds available in your bank or credit account to cover the order cost Please Update Your Payment Details in order for us to Proceed with your shipment Today To verify your Payment details, click on the link below. and follow the state procedure.
VIPRE Business Agent Anti-phishing removed a known bad URL from your email message. It was deleted or quarantined and replaced with this message.
Please fill in the required information.
NOTE: If we didn't Receive Your Payment Update Within 48 Hours Then we will Cancel Your Order Completely.
Thank you
Amazon Payments Management
An amazon Company Privacy Promise
Terms & Conditions
Copyright © 2016 Amazon.com, Inc. or its Affiliates
11/12/16 Malicious Links
From: Walmart Web Store
Sent: Friday, October 21,
To: customer@yourdomain.com
Subject: Notice: Re: Your Walmart Order is Ready - Caribou Coffee
Caribou Coffee, Your order is now complete.
Your Order Invoice is available for download now.
Review Walmart Order Invoice Details >>Malicious Link
Shipping address: 1309 State Street
City: Your city
State: SD
Caribou Coffee, to cancel your order,
Walmart Web Store
More than 50 years ago, Sam Walton started the tradition of hiring the best and brightest when he opened our first store in Rogers, Arkansas. And since 1962, we’ve been dedicated to helping people in our communities save money so they can live better.
11/11/16 Malicious Links
From: Mail Delivery Subsystem [mailto:no-reply@mailerdaemon.com]
Sent: Tuesday, November 15,
To: customer@yourdomain.net
Subject: Warning: could not send message for past 4 hours
Transient Delivery Errors [ 212.7.205.187 ] Fri. 11 Nov 2016 04:30:24 GMT
Email: customer@yourdomain.com
More than 10 incoming messages could not be delivered since Nov. 11 2016 for customer@yourdomain.com
Reconfigure & retrieve your messages: Mail Settings (link opens page designed to capture your email address and password)
Warning: Fix error to avoid email account malfunction.
Remote HOST said: 550 sorry,
Update Agenda Mail settings (another link to capture your email address and password)
Microsoft respects your privacy. Please read our online Privacy Statement.
Microsoft Corporation. One Microsoft Way, Redmond, WA 98052
When you click the links in this message it opens the following page and asks for your email credentials:
An error in your SMTP/POP settings is blocking your incoming emails……
Message: Date: Wed Nov 16 2016 08:27:36 GMT-0700 (Mountain Standard Time)
Subject: Error loading some of your inbox messages
User: %0%
Bounce reason: An error in your SMTP/POP settings is blocking your incoming e-mails
550-5.1.1 :POP configuration text can not be verified
550-5.1.2:Login encountered an unhandled error in your SSL settings
550-5.1.3:Login encountered an unhandled error in your SSL settings
Suggested
Solution: Please fill out the form below. Once the error is fixed, our team will contact you.
Email address: customer@yourdomain.net
Password:
Submit report (button to send your credentials to spammer)
Your e-mail may be completely
5/28/16 Malicious Links
From: Login technical support notification [mailto:customer@yadtel.net]
Sent: Saturday, May 28, 2016 10:07 AM
Subject: Email Login Admin Alert
Importance: Low
Your Service Provider Cooperative, Inc.
We are having some technical Problem on Our Incoming Server And Outgoing Server To All Our Customer’s Web-mail User Which Requires Urgent Service Support; We Are Setting New Standards For Efficient And Effective Services To All Our Customers, To Complete This Process And Secure Your Mailbox Account, Please Login Your E-Mail Account For Service & Maintenance.
Click Here to Login Your E-mail Account for Service & Maintenance OR Copy this Link to your browser: http://yourdomain-net-loginhelpdesk.sitey.me/ << malicious link
We apologize for any inconvenience caused due to this Maintenance
Your Service Provider Web-mail Support Team.
5/21/16 Malicious Links
Subject: YOUR DELIVERY: customer@yourisp.net
Date: 05/21/2016 9:37 am
From: "Glorria 05/21/2016" <support@maliciousdomain.com>
To: customer@yourisp.net
Reply-To: admin@maliciousdomain.com
Delivery of your cash system
needs to be confirmed...
Click the link below to confirm:
http://maliciouslink
Warm Regards,
Gloria
Here is That link again:
http://maliciouslink
If you want to lose your competitive advantage in the marketplace by no longer receiving these valuable messages packed with useful tips, tricks and resources on how to be a successful internet network marketer.
(Keep in mind, you will lose acc'ess to ALL upcoming emails and bonuses forever.)
As a valued subscriber I will send you
only gifts, valuable information and only promote products which I believe will make you a more successful Internet Marketer.
You may unsubscribe at any time using the link at the end of this email but are no longer entitled to any of the benefits above.
http://maliciouslink
5/24/16 Malicious PDF attachment
From: Marsh.Certificate@maliciousdomain.com [mailto:Marsh.Certificate@maliciousdomain.com]
Sent: Tuesday, May 24, 2016 9:31 AM
To: customer@yourdomain.net
Subject: ISP name Certificate
Reply To : FtLauderdale.CertRequest@maliciousdomain.com
PLEASE DO NOT REPLY TO THIS EMAIL. USE THE REPLY-TO EMAIL ADDRESS INSTEAD.
THIS IS A POST-ONLY MAILING. MAIL SENT TO THIS ADDRESS CANNOT BE ANSWERED.
5/11/16 Ransomware attachment and link
Subject: company
From: Ryan Blanchard
To: customer@yourdomain.com
Date: Wed 12:38
· company _AA07E0.zip <malicious attachment
To protect your privacy, remote images are blocked in this message. Display images <malicious link
hello (customer username)
Attached please find the company report for your review
Thank you.
Regards,
Ryan Blanchard
Subject: other names
From: Henrietta Calhoun
To: customer@yourdomain.com
Date: Wed 12:09
· other names _9E764D.zip <malicious attachment
To protect your privacy, remote images are blocked in this message. Display images <malicious link
hello (customer username)
Attached please find the other names report for your review
Thank you.
Regards,
Henrietta Calhoun
3/16/16 Phishing Scam
Your ISP High Speed Internet Residential Application Login Service
LOGIN TECH SUPPORT
We are still having difficulties in Resolving the Problem in our Incoming Server and Outgoing Server this Month February, to this effect your Mailbox Account needs Urgent Support: we are setting new standards for efficient and effective services to all our customers, to complete this Upgrading Process and Secure your Mailbox Account, Please Login your E-Mail Account for Service & Maintenance.
Click Here to Login Your E-mail Account for Service & Maintenance OR copy this link to your browser to login http://maliciouslink.me/
Tech Support Team.
2/16/16 Phishing
From: helpdesk@yourisp.net
Sent: Tuesday, February 16, 2016 6:38 PM
To: helpdesk@yourisp.net
Subject: Email Upgrading Support
Your Service Provider Cooperative
Email Upgrading Support
Servicing central South Dakota with high quality
Click Here to Login Your E-mail Account for Service Maintenance OR Copy This Link to Your Browser: http://yourserviceprovider-netmailboxmainten.jimdo.com/
© 2016 Your Service Provider Cooperative, Inc