Cigar Asylum Cigar Forum  

Go Back   Cigar Asylum Cigar Forum > Non Cigar Specialty Forums > Misc > General Discussion

Closed Thread
 
Thread Tools Display Modes
Old 03-25-2011, 09:02 PM   #1
OLS
Suck It
 
OLS's Avatar
2
 
Join Date: Oct 2008
First Name: Brad
Location: TN
Posts: 7,912
Trading: (19)
Bolivar AirForce (Served With Honor)
OLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to behold
Default Recent Phishing or Mailcious code Email

I need the members of this board who are getting a recent series of Spam emails to respond here about it if you would. We are trying to figure out how they began targeting certain members and who might be responsible. The emails purport to be from one or all of three package express companies. They relate how you have a package that has been sent to your home address and it will arrive in 7 days. There is a version that says 3 days also. There is an attachment (zip file) to the email that is supposedly tracking information that a person might be inclined to click on for information on these mysterious packages. Who wouldn't want some free thing coming in, what on earth might it be? yay. Let's see what it is and who it's from and where it is. Except it is likely just going to install a keystroke logger or other spyware program onto your computer.

I sure would like to hear from anyone who is getting this series of emails. We have a wild hunch that it might be coming from someone we know, but that is PURE speculation and needs to be completely triangulated or else it would just be an unfair witchhunt. With your help we might get one step closer to finding out. Or we might just find out that everyone in the world is getting them from Julian Assange, lol.
OLS is offline  
Old 03-25-2011, 09:14 PM   #2
Brutus2600
Your resident lancerHO
 
Brutus2600's Avatar
1
 
Join Date: Apr 2010
First Name: Brian
Location: Fort Worth, TX
Posts: 2,063
Trading: (46)
LGC
Brutus2600 has a spectacular aura aboutBrutus2600 has a spectacular aura aboutBrutus2600 has a spectacular aura about
Default Re: Recent Phishing or Mailcious code Email

I never use my work email to sign up for ANYTHING...but I got that same junk "United Parcel Service" email on my personal email and my work email multiple times.

I believe it's just a big spam email that's gone out recently...because there is nothing that could correlate between my two emails.

Here is the exact email for comparison:

"Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

Thank you.
? 1994-2011 United Parcel Service of America, Inc."

Attached file was called: UPSnotify.rar‎ (6 KB‎)
Email address was: infojs @ups. com
__________________
www.halfwheel.com | news+reviews
You can also follow me on Twitter @brutus2600

Last edited by 68TriShield; 03-26-2011 at 08:16 AM. Reason: disable link
Brutus2600 is offline  
Old 03-25-2011, 09:16 PM   #3
Bill86
Snob
 
Bill86's Avatar
 
Join Date: Jul 2010
First Name: Bill
Posts: 6,704
Trading: (67)
Cohiba
Bill86 is a name known to allBill86 is a name known to allBill86 is a name known to allBill86 is a name known to allBill86 is a name known to allBill86 is a name known to all
Default Re: Recent Phishing or Mailcious code Email

These are who my emails are from.

"United Parcel Service" <info6baeu@ups.com>

and

"United Parcel Service" <info36@ups.com>



Both of mine say

Dear customer.

The parcel was sent your home address.
And it will arrive within 3 business day.

More information and the tracking number are attached in document below.

Thank you.
© 1994-2011 United Parcel Service of America, Inc.

The titles of the emails are

United Parcel Service notification #XXXXXXXXX I X'd out the numbers

and

United Parcel Service notification #X X'd out the single number

These went both straight to the spam box (yahoo email) and have no proper UPS banners or tracking numbers in the emails. There are attachments but there is no way in hell I'm clicking those.
Bill86 is offline  
Old 03-25-2011, 09:32 PM   #4
M1903A1
Have My Own Room
 
M1903A1's Avatar
 
Join Date: Oct 2008
Location: 1060 W. Addison
Posts: 1,573
Trading: (4)
RA
M1903A1 will become famous soon enough
Default Re: Recent Phishing or Mailcious code Email

I've been getting the UPS spam as well...but I don't recall signing up for anything lately.
__________________
"It's the cigars that bring us together, but it's the people that cause us to stay."
M1903A1 is offline  
Old 03-25-2011, 09:33 PM   #5
OLS
Suck It
 
OLS's Avatar
2
 
Join Date: Oct 2008
First Name: Brad
Location: TN
Posts: 7,912
Trading: (19)
Bolivar AirForce (Served With Honor)
OLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to behold
Default Re: Recent Phishing or Mailcious code Email

haha, I hit the Trifecta, I got all of the Major Carriers over the past few weeks. Very same MO, and you
are right, no WAY I am gonna click that. I am asking in PMs if the persons replying in tis thread have used
any online cigar vendors, so expect my call, lol. you do not have to share that info, but it might help this
investigation.
OLS is offline  
Old 03-25-2011, 09:37 PM   #6
OLS
Suck It
 
OLS's Avatar
2
 
Join Date: Oct 2008
First Name: Brad
Location: TN
Posts: 7,912
Trading: (19)
Bolivar AirForce (Served With Honor)
OLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to behold
Default Re: Recent Phishing or Mailcious code Email

Ahh, We have our first NON-winner. This may be much wider, and therefore possibly not anyone we know, per se.
OLS is offline  
Old 03-25-2011, 09:50 PM   #7
hotreds
Ephesians 2:8
 
hotreds's Avatar
13
 
Join Date: Oct 2008
Location: 5 miles past "Resume Speed"
Posts: 11,665
Trading: (63)
Bolivar
hotreds has disabled reputation
Default Re: Recent Phishing or Mailcious code Email

I, too, have been getting daily emails from "UPS" indicating i had a package to be delivered. Yahoo filtered this to my "Spam" folder, and when I saw the attachment and the "dear customer" I simply deleted the message, feeling it was not legit, and that the attachment certainly contained something unpleasant. Next one I get I'll check the headers more carefully and post here.
__________________
God loves you so much, that he made you read this, just to let you know.
hotreds is offline  
Old 03-25-2011, 10:40 PM   #8
cobra03
Adult Babysitter
 
cobra03's Avatar
3
 
Join Date: Aug 2009
First Name: Scott
Location: Hamburg, NY
Posts: 1,880
Trading: (15)
Partagas
cobra03 will become famous soon enoughcobra03 will become famous soon enough
Default Re: Recent Phishing or Mailcious code Email

Ive got several from both UPS and FEDEX. Deleted all of them without opening them. Started to get them a few weeks ago.
__________________
"I'm feelin' low, Apu. You got any of that beer that has candy floating in it, you know Skittlebrau?https://www.facebook.com/thebuffalobeerleague
cobra03 is offline  
Old 03-25-2011, 10:40 PM   #9
Eleven
Solid As The Sun
 
Eleven's Avatar
 
Join Date: Aug 2009
First Name: Scott
Location: SW Ohio
Posts: 1,859
Trading: (23)
Eleven has a spectacular aura aboutEleven has a spectacular aura aboutEleven has a spectacular aura about
Default Re: Recent Phishing or Mailcious code Email

I got 2 from UPS the other day. Never thought it could be connected to this place.
__________________

CA: putting the 'man' in bromance since 2008! --markem.
Eleven is offline  
Old 03-25-2011, 10:51 PM   #10
OLS
Suck It
 
OLS's Avatar
2
 
Join Date: Oct 2008
First Name: Brad
Location: TN
Posts: 7,912
Trading: (19)
Bolivar AirForce (Served With Honor)
OLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to beholdOLS is a splendid one to behold
Default Re: Recent Phishing or Mailcious code Email

Waiting for a couple of PMs to maybe come back, this may not necessarily be as a result of this vendor person.
In fact it is looking like it is everywhere. More crow for me to eat, lol. I have developed a taste for it.
OLS is offline  
Old 03-25-2011, 11:37 PM   #11
icehog3
Admiral Douchebag
 
icehog3's Avatar
15
 
Join Date: Oct 2008
First Name: Tom
Location: Clermont, Kentucky
Posts: 71,440
Trading: (60)
HUpmann
icehog3 has disabled reputation
Default Re: Recent Phishing or Mailcious code Email

I have gotten these in the recent past, and never did any business, ever, with the person I believe some suspect.
__________________


Thanks Dave, Julian, James, Kelly, Peter, Gerry, Dave, Mo, Frank, Týr and Mr. Mark!
icehog3 is offline  
Old 03-26-2011, 01:03 AM   #12
Bill86
Snob
 
Bill86's Avatar
 
Join Date: Jul 2010
First Name: Bill
Posts: 6,704
Trading: (67)
Cohiba
Bill86 is a name known to allBill86 is a name known to allBill86 is a name known to allBill86 is a name known to allBill86 is a name known to allBill86 is a name known to all
Default Re: Recent Phishing or Mailcious code Email

I'm not sure how good this new source is but here's what I got googling "fake UPS emails".

http://news.softpedia.com/news/Fake-...l-191161.shtml

FWIW

EDIT - This doesn't prove anything seeing as how none of us know how said spammers got our emails. It only proves one person isn't doing this, if the source is reliable.
Bill86 is offline  
Old 03-26-2011, 06:23 AM   #13
Coach Deg
C O W eieio.
 
Coach Deg's Avatar
4
 
Join Date: May 2009
First Name: Mike
Location: Hudson, FL
Posts: 2,853
Trading: (59)
Bolivar
Coach Deg is a glorious beacon of lightCoach Deg is a glorious beacon of lightCoach Deg is a glorious beacon of lightCoach Deg is a glorious beacon of lightCoach Deg is a glorious beacon of light
Default Re: Recent Phishing or Mailcious code Email

Mine was a DHL package in the next 7 days
Coach Deg is offline  
Old 03-26-2011, 06:46 AM   #14
TRicker
Guest
 
Posts: n/a
Default Re: Recent Phishing or Mailcious code Email

I've gotten UPS, FEDEX, and DHL.
 
Old 03-26-2011, 06:47 AM   #15
taltos
Really, really old
 
taltos's Avatar
 
Join Date: Oct 2008
First Name: Paul
Location: Saugus, MA
Posts: 2,486
Trading: (3)
Punch MarineCorps (Served With Honor)
taltos is a jewel in the roughtaltos is a jewel in the roughtaltos is a jewel in the roughtaltos is a jewel in the rough
Default Re: Recent Phishing or Mailcious code Email

I got the UPS letter two days ago but deleted it immediately. If I get it again, I will post the respond name.
__________________
Jimmy, some of its magic, some of its tragic, but I had a good life all the way. He Went to Paris, J. Buffett
taltos is offline  
Old 03-26-2011, 07:39 AM   #16
Hippi3Slay3r
ಥ_ಥ
 
Hippi3Slay3r's Avatar
 
Join Date: Apr 2009
First Name: Kyle
Location: Appleton WI
Posts: 615
Trading: (22)
Bolivar
Hippi3Slay3r will become famous soon enoughHippi3Slay3r will become famous soon enough
Default Re: Recent Phishing or Mailcious code Email

Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.




sent by: admisupport @ups .com
all my friends with Gmail accounts got this on the same day as I did id guess its just normal spam.
__________________
"We must all hang together, or assuredly we shall all hang separately." -Benjamin franklin.
Hippi3Slay3r is offline  
Old 03-26-2011, 07:50 AM   #17
Devanmc
Have My Own Room
 
Devanmc's Avatar
 
Join Date: Sep 2010
First Name: Devan
Location: The Zoo
Posts: 1,971
Trading: (40)
RyJ Army (Disabled Vet)
Devanmc is a jewel in the roughDevanmc is a jewel in the roughDevanmc is a jewel in the rough
Default Re: Recent Phishing or Mailcious code Email

my personal hotmail inbox has at the moment 5622 new/unread emails. Dunno if i got anything from these people but there is alot of junk from the past 8 years ive NEVER looked at or opened.
__________________
I spent a lot of my money on booze, cigars, birds and fast cars, the rest I just squandered. -George Best
Devanmc is offline  
Old 03-26-2011, 07:53 AM   #18
jcruse64
Adjusting to the Life
 
Join Date: Jan 2009
First Name: Joe
Location: Paducah, KY USA planet Earth
Posts: 313
Trading: (1)
jcruse64 is on a distinguished road
Default Re: Recent Phishing or Mailcious code Email

Have been getting one a week or so for the last several weeks, from all the major carriers. Ain't no way I'm opening that little paper clip. Only to my Yahoo account though. It is the account I use for all my online ordering, so it would be difficult to hang it on any one business/type business.
jcruse64 is offline  
Old 03-26-2011, 08:24 AM   #19
mmblz
.090909...
 
mmblz's Avatar
 
Join Date: Oct 2008
Location: NH
Posts: 4,031
Trading: (3)
Partagas
mmblz has disabled reputation
Default Re: Recent Phishing or Mailcious code Email

spam is spam.
no black helicopters.

most impressive is that they send the email to 8 or 10 people.
i'm impressed that they've found a way to deliver one package to 10 addresses!

__________________
herf wear
mmblz is offline  
Old 03-26-2011, 08:43 AM   #20
Barcode
Adjusting to the Life
 
Barcode's Avatar
4
 
Join Date: May 2010
First Name: Tom
Location: Everett, WA
Posts: 477
Trading: (16)
RyJ Navy (Served With Honor)
Barcode will become famous soon enough
Default Re: Recent Phishing or Mailcious code Email

I just went and looked in my spam folder and I had at least 2 in there from UPS.
Barcode is offline  
Closed Thread


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -6. The time now is 09:46 PM.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
All content is copyrighted jointly by Cigar Asylum and the content provider.