& SOCIAL MEDIA - THREATS & SCAMS

Transcription

1 & SOCIAL MEDIA - THREATS & SCAMS Please note that this list contains and social media threats and scams reported to or discovered by CMSnet. It should not be considered and exhaustive list and any suspicions electronic information that you receive should always be handled with care. DO NOT open s you are unsure about and DO NOT forward them to colleagues. ALWAYS contact you IT Department for further advice and support. 30/12/2014 Apple Store - Transaction Cancellation Form. Phishing Scam According to this , which is supposedly from Apple, you have purchased a TomTom from the Apple Store. 30/12/2014 Virgin Australia - Free Flights for Entire Year. Facebook Survey Scam Facebook Page that is supposedly associated with airline Virgin Australia claims that you can go in a draw for free flights for a year by liking and sharing the page and clicking a link. 29/12/2014 Gmail - Deferred Message. Spam Website According to this , Gmail has found a deferred message in your account. The includes a link that offers to show you the deferred message. 22/12/2014 Food24.com - Go Here ASAP To Access CASH. Phishing Scam Neska Grubart has sent you a link to an story on Food24.com Hey there, Are you late on a bill payment? Do you need extra cash to make it through the weekend? If YES, then I ve got just the thing for you. Go Here ASAP To Access CASH. 22/12/2014 Aquaid - Card Receipt. Suspected Macro Virus. Message supposedly from Aquaid. Hi, Please find attached receipt of payment made to us today, Regards Tracey. Contains word attachment. 19/12/2014 Target - Order Confirmation. Malware. Order confirmation supposedly from Target claims that the company's online store has an order addressed to you. The message advises you to click a link to obtain full order information. 18/12/2014 Mailbox Almost Full. Phishing Scam. supposedly from the Mail System Administrator, claims that your mailbox is almost full and you should therefore click a link to 'reduce size automatically'. 17/12/2014 UK Geology Project - Invoice as requested. Malware. Fake from UK GEOLOGY PROJECT by "Rough & Tumble" with "Moussa Minerals" <[email protected]>. Contains word document and macro virus.

2 17/12/2014 Fake Inheritance . Phishing Scam. claiming to be from a legal practitioner in Malaysia, informing you of a proposition regarding the allocation of lost inheritance monies. Asks you to make contact via an enclosed address. 16/12/2014 Google Plus 2014 Promotion. Lottery Scam. According to this you have won 550,000 in the Google Plus 2014 Promotion. Information about the supposed win is contained in an attached Microsoft Word document signed off by 'Dr. Larry Page' of Google. 15/12/2014 GoDaddy - Account Notice. Phishing Scam. supposedly from web hosting company GoDaddy claims that your account may pose a potential performance risk to the server because it contains too many directories. 15/12/2014 Payment Gateway - Credit Card Transaction Result. Malware. Payment gateway transaction result notification claims that your credit card has been charged several hundred dollars. The includes an attachment that supposedly contains a sales receipt for the transaction. 11/12/2014 MTL Group Ltd - Invoice: VE-60507LEJ Malware. supposedly from MTL Group ltd claiming it is the general payment reminder generated by the sales team. The asks you view attached file "VE-60507LEJ zip" for details. 10/12/2014 Facebook - Password Reset . Malware. supposedly from Facebook claims that your password has been reset due to suspicious activity and you must click a link to 'restore the password'. 10/12/2014 Walgreens - Order . Malware Website. Order supposedly from US pharmacy retailing chain Walgreens claims that you can find more information about a recent order by clicking a link. 09/12/2014 Generic - Your Address Transmitting Viruses. Phishing Scam. from 'Admin' claims that your address has been transmitting viruses and your account will be deactivated if you do not click a link to 'sanitize your account'. 08/12/2014 K J Watking & Co Remittance Advice. Malware. supposedly from K J Watking & Co regarding a remittance advice for recent BACS payment. Contains a zipfile that you are asked to open. 07/12/2014 Argos - Curved TV Giveaway. Survey Scam. Facebook post claims that retailer Argos is giving away a Samsung curved TV for Christmas and you can enter by sharing and liking the post and clicking a link.

3 06/12/2014 Natwest - Account Re-evaluation Required. Phishing Scam supposedly from UK bank NatWest warns that there has been 'uncommon activity' on your account. 05/12/2014 Generic - Viber Will Become Chargeable. Phishing Scam. Circulating message claims that messaging service Viber will start charging you to send messages if you do not send the information to ten people to prove that you are an 'avid user'. 05/12/2014 Generic - STD 261 Form . Malware. This claims that all employees are required to fill out an 'STD 261' form contained in an attached file. Supposedly, the form is an 'Authorization to Use Privately Owned Vehicle on State Business' and is sent out annually. 04/12/2014 Generic - You Have Received a New Fax. Malware. According to this , you have received a new fax. The implies that printing company Epson sent the fax. Supposedly, you can view the fax by opening an attached.pdf. 03/12/2014 Generic - Urgent Message. Suspect Malware. Your friend Linda Dodson has send you the following link. You were sent this via FB and you haven't watched it and it's URGENT. I need to know if you want the access or if I should give it to someone else right away. Please hurry HERE, 03/12/2014 Bob Erb Donation Project. Phishing Scam. supposedly from philanthropist and lottery winner Bob Erb's 'publicity secretary' claims that, via the random selection of your address, you have been chosen as the recipient of $850,000 as part of a 'Christmas Donation Project'. 02/12/2014 Walmart - Order Details . Malware. supposedly from Walmart claims that you can click a link to read more information about a recent order. 28/11/2014 Costco - Order Notification. Malware. supposedly from Costco thanks you for your recent order and invites you to view order details by clicking a link. 25/11/2014 Speeding Infringement Notice. Spam Site. Infringement notice claims that you have been caught speeding by a verified speed camera and must pay a fine. The includes links that supposedly allow you to pay the fine or view the speed camera images.

4 25/11/2014 ANZ - Promises $250. Phishing Scam. This claims that customers who click a link to participate in a survey about ANZ will be rewarded with edine Discount Vouchers worth $ /11/2014 PayPal - Message stating they have taken from your account. Malware. Message says these charges were to pay for various items. The message also contains a link to dispute the charges but this only leads to malware downloads. 21/11/2014 Generic - Message Claims Calls Can Clone Your SIM Card. Facebook Scam. Circulating social media post warns users not to answer calls from because the callers may try to clone your SIM card when you answer. 20/11/2014 Facebook - Audi R8 Giveaway - Facebook Scam. Facebook Page claims that you can win an Audi R8 car just by liking the page, commenting with your desired colour, and sharing a promotional post. 19/11/2014 Apple Store - Receipt For Payment. Phishing Scam. Message supposedly from PayPal claims to be a receipt for a recent payment to the Apple store. The includes a 'dispute transaction' link that you can click if you did not authorize the charge. 18/11/2014 Facebook - Work from home. Phishing Scam. Scammers are using well-known Internet brands like Google, Facebook and Yahoo to trick people into purchasing work from home kits and then ripping off victims credit cards, bank accounts, or stealing their personal information to use for identity theft. 13/11/2014 Generic - Here is a very interesting video that you simply must watch. Potential Malware. message stating Hey, Here is a very interesting video that you simply must watch. This guy has been very successful at turning everyday people into 5-figure monthly earners... And he's doing it at zero cost. 11/11/2014 Generic - The easiest way to make a consistent $1000 a day. Phishing Scam message Hey there, Here's the easiest way to make a consistent $1000 a day and you can start TODAY... All you do is copy, paste and profit. Here is your private video message. 10/11/2014 Facebook - Your Account is Temporarily Locked. Phishing Scam supposedly from Facebook, claims that your account has been temporarily locked and you must therefore click a link to complete a security check and restore account access.

5 06/11/2014 Facebook pieces of Play Station 4 that can t be sold. Facebook Scam. Facebook post sating there are 200 pieces of Play Station 4 that can t be sold because they have been unsealed. Therefore we are giving them away for free. Want one of them? Just SHARE this photo & LIKE Our Page and we will choose 200 people completely at random on December 1st! as your Christmas gift! 04/11/2014 Generic - C-93 Virus Alert. Phishing Scam. An claiming to be from Windows Outlook warns that a 'C93 Virus' has been detected in your mailbox and you are therefore required to click a link to run a Norton anti-virus scan to resolve the issue. 30/10/2014 Facebook - $100 KOHL'S Gift Card Giveaway. Survey Scam. Facebook post claims that you can click a link to get a $100 gift card from department store Kohl's. This is a total hoax and generates Facebook traffic for the unscrupulous sender. 29/10/2014 Generic - Invoice Malware. from gianluca klein <[email protected]> (or similar) requesting that you open invoice.zip to confirm. Gives zip password : /10/2014 Skype - Missed Messages. Pharmacy Spam. According to this , which claims to be from Skype, you have missed messages waiting. The invites you to click a link to view your messages. 27/10/2014 Microsoft - Request to Terminate Microsoft Account. Phishing Scam. supposedly Microsoft Account Services claims that you have submitted a request to terminate your Microsoft Account and the process has already started. The incudes a link to cancel the termination request. 25/10/2014 Generic - $100K/month position available (ONE left!). Phishing Scam. from [email protected] (for example) stating You are being notified that there is exactly (1) job remaining in your area with a guaranteed salary of $100K per month. Click Link to external URL to find out. 24/10/2014 Australia Post - Parcel not Delivered. Malware. supposedly from Australia Post claims that your parcel was not delivered to your address because nobody was home. The instructs you to click a 'Track Your Item' link to get more information about the undelivered parcel. 23/10/2014 PayPal - We've temporarily limited your account. Phishing Scam. Message supposedly from PayPal claims that the company needs your help resolving an issue with your account and asks you to open an attached file and follow the instructions.

6 22/10/2014 HMRC Government Gateway. Phishing Scam thanking you for your submission for the Government Gateway. Message reads 'The Government Gateway is the UK's centralized registration service for e-government services. To view/download your form to the Government Gateway please visit Clicking the link takes you to a bogus site. 21/10/2014 Facebook - Pieces of ipad Giveaway. Facebook Scam Message being shared across Facebook claims that a particular Page is giving away 193 "pieces of ipad 2" to users who share an image and like the Page. Unfortunately this is a like-farming scam and there are no ipads being given away. This is tactic used by unscrupulous Facebook Page owners to promote their Page and gain large numbers of likes. 17/10/2014 Important - New Outlook Settings . Malware. with the subject line 'Important - New Outlook Settings' advises you to click a link to download instructions before updating settings for Microsoft. Outlook. 15/10/2014 Starbucks - Card egift. Malware. claims that AT&T has sent you a Starbucks Card egift valued at $20. The instructs you to click a button to print out your Starbucks Card. 14/10/2014 Facebook - See Who Watched Your Profile. Phishing Scam. Facebook post claims that you can click a link to 'see who watched your profile'. 13/10/2014 ANZ Bank - Account Re-confirmation. Phishing Scam. supposedly from large Australian and New Zealand Banking group, ANZ claims that you need to click a link to re-confirm your account. 09/10/2014 Vodafone - One Unread Message. Phishing Scam supposedly from phone service provider Vodafone claims that you have one unread message on your Online Vodafone Account and should click a link to view the message. 06/10/2014 Generic - Interested in Your CV. Money Laundering Scam. claims that a company is interested in your CV and invites you to apply for a job involving the 'payment control' of clients. 06/10/2014 Red Cross - Job Offer. Phishing Scam. supposedly from the American Red Cross claims that the organization is recruiting staff to work in a disaster zone and will pay workers $250 per day. To procure one of the positions, you are instructed to fill in a membership form and pay an 'enrolment' fee.

7 03/10/2014 Viber - Missed Call. Malware. Notification supposedly from messaging service Viber claims that you have a missed call waiting and invites you to click a link to listen to the message. 01/10/14 Directjobs - Order: Malware. Message supposedly containing information to an order having been placed containing zip file with order information enclosed. 29/09/2014 AOL - Mail Exceeded Storage Limit. Phishing Scam. Message supposedly from large US webmail provider AOL Mail claims that your storage limit has been exceeded and you must therefore click a link to re-validate your mailbox. 28/09/2014 Co-operative Bank Financial Service Compensation Scheme (FSCS). Phishing Scam. Message claims to have been sent from the bank and contains a link to a fraudulent internet banking log on page. The asks you to click on the link in order to verify and update your billing record and qualify for a benefit. 27/09/2014 Generic - Confirm a recent online purchase, such as a ticket. Malware. This will ask you to download an attached file for more information but the attachment actually contains a virus or malicious malware. 09/09/2014 Apple ID - Complete Our Validation Process. Phishing Scam. supposedly from Apple Customer Service claims that you must complete a validation process for your account or risk suspension of your Apple ID. 03/09/2014 HMRC - Account Locked. Phishing Scam. claiming to be from UK tax agency HM Revenue & Customs (HMRC), warns that your HMRC account has been locked and that you should click a link to complete a verification process. 01/09/2014 HMRC - Your Online Gateway.gov.uk Submission . Malware. HMRC is aware of a bogus being circulated thanking customers for their submission to the Government Gateway. The includes an attachment which should not be opened as it contains a virus. Do not respond to this . 28/08/2014 HSBC Bank - Account Monitoring Process. Phishing Scam. claiming to be from HSBC bank advises you that your account has been suspended via an account monitoring process designed to protect you from fraudsters.

8 14/08/2014 Bigpond - Upgrade Your Bigpond Account. Phishing Scam. Message supposedly from Australian internet and service provider Bigpond claims that unused accounts are being cancelled to create more space and you must therefore click a link to re-activate your account and prevent its permanent closure. 13/08/2014 Amazon - 90% Discount Coupon . Phishing Scam. claims that you are the winner of an Amazon discount coupon for 90% off any Amazon product. 17/07/2014 Facebook - Security Alert Facebook Disabled. Phishing Scam. Message supposedly from the Facebook Security team claims that, due to suspicious account activity that violates the Terms of Service, your Facebook account will be automatically disabled if you do not click a link and confirm account details within 12 hours. 14/07/2014 LinkedIn - Confirm Address. Phishing Scam. supposedly from business orientated social network LinkedIn claims that your LinkedIn account has been blocked due to inactivity and, to restore access, you are required to click a link to confirm your address. 06/06/2014 Netflix - Netflix Account Cancellation's. Phishing Scam. Message supposedly from video streaming service Netflix claims that, due to a payment issue, your account will be cancelled unless you click a link and update credit card details. 16/05/2014 Amazon - Password Reset Request. Phishing Scam. supposedly from Amazon claims that the company has received a password reset request from an unrecognized device. Recipients are advised to protect their accounts by following a verification procedure outlined in an attached file. 14/05/2014 Yahoo - DSVX Virus . Phishing Scam Message claiming to be from Yahoo asks recipients to update their Yahoo account on the grounds that a 'DSVX virus' has been detected in their account. 08/05/2014 Google - Fraudulent Verification Survey. Phishing Scam supposedly from the 'All Domain Mail Team' at Google+ asks recipients to participate in a 'spam and fraudulent verification survey'. 05/05/2014 Virgin Media - Quick Pay Profile Update. Phishing Scam. supposedly from Virgin Media claims the company has introduced extra security features and users must therefore click a link to upgrade their Quick Pay profile. Published: May 5, 2014

9 01/05/2014 Walmart - Unclaimed Walmart Vouchers Notification. Phishing Scam. claims that the 'Walmart Reward Server' has identified the recipient's address as being linked to $500 worth of unclaimed Walmart vouchers. 30/04/2014 ATO - Final Estimated Refund. Phishing Scam. Message supposedly from the Australian Taxation Office claims that the recipient can claim a tax refund of $ by following a link and filling in a claim form. 30/04/2014 Telstra - Refund Bill Account. Phishing Scam. supposedly from Australian Telecommunications Company Telstra claims that the customer is owed a refund due to a billing error. 25/04/2014 Generic - Visa Card Status Notification. Malware. 'Status notification' supposedly from Visa claims that the recipient's card access has been limited because 'unusual activity' has been detected. 23/04/2014 Westnet - Upgrade Your . Phishing Scam. Message supposedly from Australian ISP Westnet claims that users must click a link to upgrade a soon to expire account. 22/04/2014 Generic - Update IRS E-File. Phishing Scam. supposedly from the Internal Revenue Service demands that recipients click a link to update their IRS e-file. 14/04/2014 Amazon - Integrity Check . Phishing Scam. supposedly from Amazon claims that the company performs regular integrity checks on user accounts and the recipient must therefore click a one-time validation link to avoid account suspension. 09/04/2014 Generic - Click to Read Vital Newsletter. Malware. claims that the sender has uploaded a vital newsletter using Google Docs and requests that recipients click a link to gain immediate access by signing in with their address details. 07/04/2014 itunes - Purchase Receipt. Phishing Scam. supposedly from the itunes store lists orders supposedly made via the user's Apple account. The informs users that, if they suspect that their account has been hijacked, they should click a link and supply information to rectify the issue.

10 03/04/2014 Capitec - Routine Maintenance. Phishing Scam. supposedly from South African bank Capitec claims that users must confirm their online access as part of routine maintenance to ensure online safety. 25/03/2014 Google - Google Drive . Phishing Scam 'Urgent' requests recipients to click a link to view a document that the sender uploaded using Google Cloud Drive. 19/03/2014 Telstra - BigPond Re-validate Account. Phishing Scam. supposedly from Australian telecommunications company, Telstra, claims that the recipient's account has exceeded its storage limit and he or she must therefore revalidate the account by clicking a link. 10/03/2014 Generic - Theme Park Accident. Phishing and Survey Scam Circulating Facebook message claims that a fatal roller coaster accident has occurred at a large theme park and provides a link to video footage of the accident. 10/03/2014 Microsoft - Outlook Web Access. Phishing Scam. supposedly from the Microsoft Account Team claims that recipients must click a link to upgrade their account and set up Outlook Web Access. 05/03/2014 PayPal - Cancel Payment. Phishing Scam. supposedly from PayPal claims that the recipient has sent a payment to a specified merchant and offers instructions for cancelling the payment if required. 26/02/2014 American Express - Personal Security Key. Phishing Scam. claiming to be from American Express instructs recipients to visit a website and create a Personal Security Key (PSK) as an account authentication measure. 26/02/2014 Westpac - Bill Payment Successfully Processed. Phishing Scam. Message supposedly sent by Australian bank Westpac, notifies recipients that a payment to a biller has been successfully processed and invites them to click a link to view transaction details. 22/02/2014 PayPal - Your Transaction was Declined. Phishing Scam. Message supposedly from PayPal claims that a transaction was declined because recent activity on the recipient's account seemed unusual. The instructs users to process a form in an attached file to confirm account information.

11 13/02/2014 Microsoft - Reactivate Your Account. Phishing Scam. Mail supposedly from Microsoft claims that recipients must click a link to complete a 'one time automatic verification' in order to avoid having their account suspended. 10/02/2014 RBS 'Latest Statement Available' Phishing Scam supposedly from the Royal Bank of Scotland (RBS) advises recipients that their latest statement and pre-advice of interest & charges is available for viewing online. 05/02/2014 HMRC - Employer Annual Return - scam HMRC is aware of a bogus being circulated advising customers to file their Employer Annual Return (P35 and P14s) for 2013 to 2014 online. The includes an attachment which should not be opened as it contains a virus. Do not respond to the and delete it immediately. 06/02/2014 cpanel - Account Verification. Phishing Scam. supposedly from website hosting control system cpanel claims that recipients must click a link to login and re-confirm their accounts. 03/02/2014 ANZ - Upgrade to New System. Phishing Scam. pretending to be from large Australian bank ANZ claims that customers must click a link to upgrade to a new system technology designed to give users maximum protection. 31/01/2014 Mint.Com.Uk - Minimum Credit Card Payment Due. Phishing Scam. Message, which pretends to be from UK based credit card provider Mint, claims that the recipient's minimum credit card payment is due and advises that the latest bill can be found in an attached file. 31/01/2014 Lloyds Banking Group - Online Access Suspended. Phishing Scam. that pretends to come from Lloyds Banking Group claims that the recipient's online account access has been suspended because login details are incorrectly entered several times. 21/01/2014 Apple Account - Update to New SSL Servers. Phishing Scam. supposedly from Apple claims that the user's online access has been blocked because customers are required to update their information in order to use new ssl servers. The latest information security and forensics news is available on the CMSnet Facebook page: