2017 e-scams-ISP Alerts

2017 e-scams

The following email messages are examples of actual email phishing scams or attempts to deliver a virus via email. Most of these examples appear to have been sent by your Internet Service Provider (ISP).
 
You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar credit card or bank.

 
If you do receive one of the following emails or a similar email message in your inbox, please avoid opening any attachments and delete the email.


NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of the large amount of scam emails that are circulating.9-06-2017 Malicious attachment

9-06-2017 Malicious attachment
  

From: eBay <ebay@ebay.com>
To: customer@yourdomain.com
Subject: Your invoice for eBay purchases (028237643343075#)
​​​​​​​

Please note that this is a system generated email. Please do not reply to this email. If you have questions, please click the following link or paste it in your browser.http://maliciouslink.ebay.com/help/basics/select-support.html


eBay sent this message to (username).

Your registered name is included to show this message originated from eBay. Learn more.


Invoice


Dear username,

Thank you for shopping on eBay! Your total amount due is USD $48.19. Download and pay your invoice 028237643343075.

________________________________________

Email reference id: [#f2bb1d647960be7efb694d97909d1c41#]

________________________________________

Learn More to protect yourself from spoof (fake) emails.


eBay sent this email to you at customer@yourdomain.net about your account registered on www.ebay.com.

eBay will periodically send you required emails about the site and your transactions. Visit our Privacy Notice and User Agreement if you have any questions.

Copyright © 2015 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. eBay and the eBay logo are trademarks of eBay Inc. eBay International AG is located at Helvetiastrasse 15/17 - P.O. Box 133, 3000 Bern 6,Switzerland.


8-23-2017 Malicious attachment

From: Card Processing [noreply@servicemessage18.ml]
Sent: Wednesday, August 23,
2017 8:16 AM
To:customer@yourdomain.com
Subject: Payment has been made

(malicious document titled paypal attached)

You have sent $2350,00 from Credit Card with Paypal to Richard Jessie, NY.
Please download and view payment information attached to
email.
Microsoft Word file being scanned with McAfee


7/12-2017 Phishing Scam

yourisp.net

INVOICE

05085

DUE DATE

July 12th, 2017

AMOUNT DUE

$2,033.55

VIPRE Business Agent Anti-phishing removed a known bad URL from your email message. It was deleted or quarantined and replaced with this message.

Dear client,

Your most recent invoice is due.

Thank you for your business!

Hank Jenkins
Billing Department
523-011-0527 x2053

© Intuit, Inc. All rights reserved.. Privacy | Terms of Service
6-8-2017 Phishing Scam

From: Postmaster [mailto:Postmaster@126.com]
Sent: Thursday, June 08, 2017 6:56 PM
To:
customer@yourdomain.com
Subject: Alert :Attention !! Attention !! Your Email Is Runing Out Data


Dear customer@yourdomain.com,

We have reasons to believe that you are about to exceed your email storage quota.

Be aware that you may not be able to receive future messages as soon as your

limit has been exceeded.

You are are hereby required to upgrade your account now to prevent lost of data.

Please Click here to upgrade your subscription to redeem an extra 50GB free.

Note: You may need to move this message to inbox to enable link.

Thanks for cooperation.

Account Management

Powered by Webmail Inc ©2017. 



6-2-2017 Phishing Scam

From: noreply@microsoft365online.com <communication@mcrosft.connect.com>
Sent: Friday, June 2, 2017 9:18 AM
To: me@mircosoft.com
Subject: Office365 : One-step Validation Process

Office 365


As part of our continuing effort to provide adequate security, we recommend that you certify your accountto provide safety for yourMicrosoft Office account


Here is the reason: To certify that you are the owner of this account and to ensure that high level protection is provided.


This is a checking process: Also, you need to certify your account to Avoid Third Party Access. Continue below to certify your account and we'll help you protect it.

Please Visit Here to Complete Process

Thank you for using Microsoft Outlook.

To stop separating items that are identified as clutter, go to Options. To stop receiving notifications about Clutter, go to Options and turn them off. This system notification isn't an email message and you can't reply to it.




3-13-2017 Virus infected link

From: Citizen Bank [mailto:update@ecitizensbankonline.com] 
Sent: Monday, March 13, 2017 12:47 PM
To: customer@yourdomain.com
Subject: We're having a problem connecting your information

March 13, 2017
Citizens Bank unusual sign-in activity!
We detected something unusual about a recent sign-in to your Citizens Bank account. 
To help keep you safe, we require an extra security challenge.
Please Log On your Citizens Bank Online account so we can help you take corrective action.
VIPRE Business Agent Anti-phishing removed a known bad URL from your email message. It was deleted or quarantined and replaced with this message.
Citizens Bank helps keep you Safe and Informed.
Sincerely, 
Online Banking Security Team
________________________________________
Citizens Financial Group, Inc. All rights reserved.
� Copyright 2017 Citizens Bank. 
Your personal information is protected by advanced online technology. 
Citizens Bank is a brand name of Citizens Bank, N.A. (NMLS ID# 433960) and Citizens Bank of Pennsylvania (NMLS ID# 522615). 
Citizens Bank corporate headquarters: One Citizens Plaza, Providence, RI 02903 
3-06-2017 Malicious attachments

Subject:  Ac Sem Ltd
Date:     2017-03-06 8:46 am
From:    "Yael Q. Dawson" <crazyze@terra.com.br>
To:          customer@yourdomain.net

 Hi
Please check the bill attached to this email.
The Transfer should appear within 40 minutes.
File Access Credentials: npWHM80

Yael Q. Dawson
2-10-2017 Phishing Scam

"ISP LOGO"


We noticed your mail has not been registered on our data base,login through our secured login page to register properly.


Login By Clicking Here now

Note:Failure to complete registration would lead to immediate mail closure

This is an Alert from Hamilton Team to help manage your mail,please do not reply for it is on monitored.