February 24, 2009
I just got this in my in-box. It looks legit enough – has the Hallmark logo and a nice invite to click on the link and view the “someone who cares about me” postcard they sent.
I was immediately suspicious for a few reasons – first it doesn’t have an email address of the person sending it to me. The legit ones always say either the email address or the name of the sender. Second, it looked too plain and not the usual stylings of Hallmark.
Sure enough, I checked the source code and it’s a Trojan attack. Had I clicked on the link to view the card, my computer would have installed a Trojan Horse to do whatever malicious intent it was meant to do.
Read more about it here. Whatever you do, don’t click on the link of anything in an email you receive unless you know the person. Here’s what the full email said:
Hello there. You’ve got a postcard from someone who cares for you.
In order to downoad your postcard, click on the link below:
http://www.hallmark.com/postcards/client72637541 (this did not link to the hallmark site, instead it was an EXE file that would have installed a trojan on my computer)
Thank you for using Hallmark services.
February 17, 2009
I just received another Phishing email supposedly coming from PayPal. The subject line reads: Important Information Regarding Your Account !
If you receive a similar email, delete it and forget about it – it’s a “phishing” attack where some nefarious character is trying to get you to divulge your personal information by clicking on the links provided. Please don’t! No legitimate company will ask you to do this – especially PayPal or a bank.
On this particular email, the “reply” email address is: firstname.lastname@example.org – which is definitely not PayPal!
December 20, 2008
It’s an unethical Scam!
If you receive a letter in the mail from ‘Domain Registry of Canada’ asking you to renew/transfer your .CA domain name it is probably NOT legit! Yes, they are a legit domain registrar but they feed off of unsuspecting people by sending very official looking letters through the mail and making it look like your domain name is registered through them, indicating it is time to renew.
Domain names are rarely renewed via regular mail and usually done via email. If you receive a renewal notice from anyone named: Domain Registry of Canada, double check who your domain registrar is before sending any money. You can do this by either contacting your Web Master or checking a Whois database. The odds are good that you do not have a domain registered with them and if you do, I highly recommend you don’t partake in their unethical, albeit legal, practices.