What's new in the world of scams and ScamWarners.
by Jillian Sun Jul 31, 2011 8:41 pm
Email users have been hit with a ton of these in the past few days. They are spam emails, supposedly from a hotel, notifying you of an accidental overcharge to your account. The email has an attachment which contains malware. Do NOT open the attachments. A sample of this spam is included below.

MSNBC has a story about these, here: http://www.msnbc.msn.com/id/43948767/ns ... -security/

Here is a partial quote of the MSNBC story, for the full article please visit their website:

To receive the refund from the erroneously charged credit card, victims are told to fill out a form attached to the email.

As with nearly all email scams, the attached form is where the danger lies.

In this case, the malicious file is masked as an executable download called RefundForm.exe, but it's actually a Trojan that installs fake anti-virus software on victims' computers that they are then pressured into paying for.


For more information on this type of "scare ware", read here: http://netforbeginners.about.com/od/sca ... reware.htm


Example of this type of scam:

From: 'Reservation Departament' <[email protected]>
To: xxxxxxxxxxxxxxxxxxxxxxxxx
Sent: Sat Jul 30 15:21
Subject: Hotel The Alex made wrong transaction

Dear Customer!

Transaction: Visa 72039_xU
On July 26th, 2011 Hotel made wrong transaction writing-down from your credit card totaling $11623.
This partner hotel was divested accreditation in Moverick Company with reference of noncompliance of the service contract.
For the return of funds please contact your bank and fill information in the attached form.
In the attachment you will find expense sheet with the sum of wrong transaction error of transaction.
Company just mediates and bears no responsibility for any money transactions made by Hotel.
Sorry for the inconvenience. We trust you can solve this unpleasant problem.

Bob Racilis,
Manager of Reception Desk & Reservation Departament

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners
Advertisement

by allgood2011 Wed Aug 10, 2011 12:57 pm
Here's a variation:

Return-path: <[email protected]>
Received: from accorhotels.com ([78.96.27.201]) by exprod8mx209.postini.com ([64.18.7.14]) with SMTP;
Wed, 10 Aug 2011 09:10:31 PDT
Message-ID: <000d01cc5777$fcb56d98$c91b604e@home-d3c68ca61b>
From: "Reservation Departament" <[email protected]>

Subject: Hotel The Fairmont made wrong transaction


Dear Client!

Transaction: Visa 8008145_1Hf
This letter notifies that on July 26th, 2011 Hotel made an error of transaction from your credit card. Total sum of decommissioning is $1472
For noncompliance of the service contract this Hotel was divested accreditation in Booking Company.
Please see the attached form. You need to fill it in and contact your bank for the return of funds.
The detailed copy of made writing-down you can find in the attachment.
Company just mediates and bears no responsibility for any money transactions made by Hotel.
Sorry for the inconvenience. We trust you can solve this unpleasant problem.

Twila Aispuro,
Manager of Reception Desk & Reservation Departament

Who is online

Users browsing this forum: ClaudeBot and 1 guest