ISP Alerts
You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar credit card or bank.
If you do receive one of the following emails or a similar email message in your inbox, please avoid opening any attachments and delete the email.
NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of
12/27/2018 Malicious Link
From: Unknown Sender
Sent: Wednesday, December 26, 2018 3:57 PM
To: ISP Customer
Subject: Congratulations!
https://landegiftcenter.maliciousurl7ad63280b6c32966f/index.html?isp=The%20Rye%20Telephone%20Company&trackid=201812262158252533#
12/17/2018 Virus
Subject Someone You Know Christmas Greeting Card
Date: 2018-12-17 09:05
From: Email Address with Someone You Know As The Sender
To: NA
Hello
A little smile, a word of cheer a bit of love from someone near a
little gift from one held dear, best wishes for the coming year.
Wishing you a very Merry Christmas.
Greeting Card is attached.
"Someone You Know"
555-555-5555 O 555-555-5555 F
E:Someone You know@xxxdomain.com
We make a living by what we get but we make a life by what we give.
Winston Churchill
Subject Review invoice required
Date: 2018-12-05 07:37 a.m.
From: Random Email Address with Your Name As The Sender
To: NA
Good Day all,
I have checked your account and all allocations agree with your remittances.
The payment made on November 14 2018 was to pay October invoices for $597.32 outstanding
Which was agreed when account details were changed
I have attached the November invoice.
Thanks and best Regards
YOUR NAME
Direct #: RANDOM PHONE NUMBERS
e:YOUR EMAIL ADDRESS
Subject: System server message
Date: 2018-12-04 11:50
Fromi: exports@randomisp
To:: youremail@yourisp.com
Blocked Incoming Messages POSTMASTER TOOLS
Postmaster@ (Malicious Link Removed)
You have more than 8 incoming messages that could not be delivered to: youremail@yourisp
For further instructions on how to correct or report this error,
please click: Release Messages (Malicious Link removed)
© 2018 Webmaster Services Limited and affiliates.
Note: This message was sent by the system for notification only. Please do not reply.
If this message lands in your spam folder, please move it to your inbox folder for proper interagtion: Click Here (Malicious Link Removed)
Subject: RE: Please validate and retrieve youremail@yourisp.com
Date: 2018-12-04 11:50
Fromi:nfo@randomisp
To:: youremail@yourisp.com
User youremail@yourisp.com
Due to the Routine checks on the mail servers some of your mails are on pending status
Please validate and retrieve mail(s).
(Malicious link removed)
Also, Enter details once and correctly, then wait for response from Our Server.
Sincerely,
Support Team
Subject: RE: Shoe Boxes
Date: 2018-11-19 09:41
From: customer@yourisp.com
To: customer@yourisp.com
Hello,
The file for your review is attached below.
You can contact me with any questions you have, do let me know.
ATTACHMENT DOCUMENT (malicious attachment)
Thanks You
Customer had a test in Your Town yesterday, so I took them up there.
Customer name
On 2018-11-14 19:15, Customer wrote:
Customer
Did we find anyone to take the boxes?
Customer signature
Links:
------
(malicious link)
https://drive.badlink.com/download.aspx?cid=6B9F96560A60F08C&authKey=%21AMuF9QEFV0ekJV0&resid=6B9F96560A60F08C%21111
11-19-2018 Phishing Email
From: Your ISP Verification Team <suport@yourisp.net>
Sent: Monday, November 19, 2018 1:30 AM
To: customer@yourisp.net
Subject: Your ISP Email Alert !!
Dear ISP User,
Due to congestion in our mail server, all unverified accounts would be shut down so to verify this account (customer@yourisp.net) is active, complete the email verification below:
Please, click Reply before filling info.
*Full Name:
*Email Address: customer@yourisp.net
*Password:
*Reconfirm Password:
Thank you for using your ISP Email!
Copyright 2018, Your ISP Inc., All Rights Reserved.
11-06-2018 Ransom Email
Subject: Your Account Has Been Hacked
Date: 2018-11-06
From: YOUR ISP EMAIL
To: YOUR ISP EMAIL
Hello! My nickname in darknet is nevil92.I hacked this mailbox more than six months ago, through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time. If you don't belive me please check 'from address' in your header, you will see that I sent you an email from your mailbox. Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer and automatically saved access for me. I have access to all your accounts, social networks, email, browsing history. Accordingly, I have the data of all your contacts, files from your computer, photos and videos. I was most struck by the intimate content sites that you occasionally visit. You have a very wild imagination, I tell you! During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching. Oh my god! You are so funny and excited! I think that you do not want all your contacts to get these files, right? If you are of the same opinion, then I think that $583 is quite a fair price to destroy the dirt I created. Send the above amount on my BTC wallet (bitcoin): 19D67Tgb3neJiTHd8pZDEBYmUn2qSjxEeB As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it. Otherwise, these files and history of visiting sites will get all your contacts from your device. Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it! Since reading this letter you have 50 hours! After your reading this message, I'll receive an automatic notification that you have seen the letter. I hope I taught you a good lesson. Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!
Good luck!
11-06-2018 Malicious links
Subject: Approved Your Application
From: Sarapit <jijom@patonce.com>
To: user@yourisp.net
Good News,
Thank you for submitting your application.
You have been selected for our project.
Check Our Guidelines
Before starting please read our guidelines
and agreement document carefully.
Review Agreement Letter
You must agree to our terms & conditions.
Once again, this offer will end very soon.
Thank you.
- Susan M. Sauer
For more details about Job Facilities
9-12-2018 Malicious attachment
Subject: EMAIL DELIVERY FAILURE: Email Account youraccount@yourisp.net UPGRADE REQUIRED !!!
From:<spammer@spammer.com>
To: user@yourisp.net
YOURISP.COM
Hello <your username>,
YourISP.com servers have experienced failure in the delivery of your previous emails as you have not been able to meet up with the recent YourISP.com verification task.
Your youremailaddress@yourisp.com needs to be upgraded and verified to avoid email service suspension.
To continue using your mailbox, you need to upgrade and verify your mailbox. This service is free.
Click Here To Proceed$B!*(Jick Here To Proceed$B!*(J
Once the upgrade is complete, your mailbox will work effectively.
Office365 yourisp.com Email provider! © 2018 All rights reserved.
8-29-2018 Malicious links
Subject: DE-ACTIVATION OF YOUR MAILBOX by server admin
Date: 2018-08-29 06:04
From: Server Admin <admin@spammer.com>
To: YOUR ISP EMAIL
URGENT SERVER DEACTIVATION WARNING!!
Dear yourisp.net,
We received an instruction few hours ago to terminate your email account
(yourisp.net) from our server.
You need to confirm you made this request or we will continue with the request.
But if you think it is an error, take action immediately to stop this process, else your email will be closed shortly.
If you are sure you gave this instruction for your account termination, please click ignore this warning and your request will be processed shortly!
Thank You,
EMAIL SECURITY TEAM
POWERED BY YOURISP.NET
8-07-2018 Malicious links
Your Password Expires Today. You are hereby directed to click on ITS HELPDESK to update your password to continue with your mailbox and follow instructions. Failure to comply with these guidelines may result in a loss of access to your Webmail account. Kindly use the link above to complete your Web-mail User authentication form.
NOTE: JUST FOLLOW THE INSTRUCTION VIA THE ITS HELPDESK.
© Copyright 2018.
All Rights Reserved
4-16-2018 Malicious links
Subject: yourisp.net Server Notification!
Date: 04/16/2018 12:48
From: yourisp.net <noreply@noreply.com>
To: user@yourisp.net
username
Your account will be suspended due to mail violation
Want to retain our service?
* Kindly Follow to verify to log in and fill in recovery details
ADMIN.
4-16-2018 Malicious links
Based on customers feedback, we've improved
Dear Valued Customer
Your ISP has launched a new messaging platform today April 13th 2018, which combines Email, Contacts and Calendar into an easy to use interface. The new version lets you manage your ISP communication email from any computer, tablet, or smartphone with Internet access.
Please Enhance to the newest version to continue using Your ISP, Click the below link to Enhance to new version 9.0
https://maliciouslink.comsaml/module.php/authSynacor/login.php?AuthState838eb852f1fee18c02cb
What’s different in the new version?
This version of Web-mail includes an upgraded interface, enhancements to many existing features, and additional features that were not previously available in Web-mail Classic. We know that change can be difficult and we want to make the transition as smooth as possible.
Plus you'll get:
Increased email storage with up to 1TB
Faster page and email load times
More functional search feature
Increased security
Supports the latest web browsers and plug-ins (IE, Firefox and Safari)
Thank you for using my Your ISP Telecommunications for your communication needs. We value your business and look forward to serving you!
© 2018 Your ISP Telecommunications. All Rights Reserved.
4-10-2018 Malicious links
Subject: CLOSE MY ACCOUNT REQUEST.
Date: 04/10/2018 9:46
From: "ADMINISTRATOR" <elbecker@spammer.com>
To: YOUR ISP MAIL
Dear Valued ISP Customer:
This is a feedback from your earlier request with instruction to close your yourisp.com account.
Note your request are now been processed, we need you to confirm the account closure request by clicking this link here.
www.webmail.maliciouslink.com/account/closure/request.html [1]_
If you didn't initiate the account closure request, Click Cancel Account Closure Request button immediately and login with your e-mail to cancel request.
Cancel Close Account Request [2]
Failure to cancel this request your account will be automatically close after 24hours
YOUR ISP WEBMAIL TEAM
NOTIC Tier II Technician
Department Support Specialist
Links:
------
[1] http://saucygirlskitchen.com/yourisp/ispdomain.html
[2] http://saucygirlskitchen.com/yourisp/ispdomain.html
3-19-2018 Malicious attachment (contains 2 malicious file attachments)
Subject: Resource limits exceeded on : yourisp.net
Date: 2018-03-18 21:39
From: cPanel <accounts@cpanel.net>
To: info@yourisp.net
Domain: yourisp.net,
You ran into the resource limits of your hosting package within the past 24 hours. This means that your website needs more resources than your package currently offers. In order for your website to run smoothly, we recommend that you to automatically add more resources to your hosting package now. To avoid hosting performance hindrance and service interruption
NOTE: Your Domain: goldenwest.net will be Disable if additional
resources is not added
Copyright(c) 2018 cPanel, Inc