外国からのPhishing mail
06/02/06 14:49 Category: Spam&Phishing
Amazon.comを装ったフィッシングメールがきた．
Amazon.comにカードで注文が来ているが，悪用かもしれない，確認の為48時間以内にサイトにアクセスせよ，とのメール．ただしアクセス先がamazonを装った別サイト．
最後にはアクセス後48時間は調査に時間がかかるだの，eメールでの問い合わせは余計に時間がかかるだの，とよく考えているというか．
悪用とは思ったが，実際にamazon.comにアカウントを持っているので，念のため問い合わせ．
Phishing or Spoofed E-mailsに報告したところ，すぐ「これはフィッシングメールなので返答しないで」と返事が来た．
見分け方のガイドがIdentifying Phishing or Spoofed E-mailsにある．たぶんamazon.comを語るフィッシングが多いんだろう．
以下フィッシングメールの内容．一部略及び*で隠してある．*************
Return-path: ＜anonymous@unitreth.***＞
Received: from unitreth.*** (unitreth.*** [***.170.103.123])by ***
Received: (qmail ***** invoked by uid *****); Sun, 05 Feb 2006 21:12:51 +0000
Date: Sun, 05 Feb 2006 21:12:51 +0000
From: Amazon Account Update
Subject: FPA NOTICE: Amazon.com Registration Suspension - Action Required
To: ***
Message-id: <20060205211251.*****.qmail@unitreth.***>
Content-type: text/html;
Dear Amazon.com Customer,
Your bank has contacted us regarding some attempts of charges from your credit card via the Amazon system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your Amazon account Due to recent activity, including possible unauthorized listings placed on your account, we will require a second confirmation of your identity with us in order to allow us to investigate this matter further. Your account is not suspended, but if in 48 hours after you receive this message your account is not confirmed we reserve the right to suspend your Amazon registration. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of Amazon policy to represent oneself as another Amazon user. Such action may also be in violation of local, national, and/or international law. Amazon is committed t! ! o assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the full extent of the law.
To confirm your identity with us click the link bellow:
＜http://dili3.**/tmp/＞http://www.amazon.com/exec/obidos/sign-in.html
After responding to the message, we ask that you allow at least 48 hours for the case to be investigated. Emailing us before that time will result in delays. We apologize in advance for any inconvenience this may cause you and we would like to thank you for your cooperation as we review this matter.
Respectfully,
Trust and Safety Department
Amazon.comにカードで注文が来ているが，悪用かもしれない，確認の為48時間以内にサイトにアクセスせよ，とのメール．ただしアクセス先がamazonを装った別サイト．
最後にはアクセス後48時間は調査に時間がかかるだの，eメールでの問い合わせは余計に時間がかかるだの，とよく考えているというか．
悪用とは思ったが，実際にamazon.comにアカウントを持っているので，念のため問い合わせ．
Phishing or Spoofed E-mailsに報告したところ，すぐ「これはフィッシングメールなので返答しないで」と返事が来た．
見分け方のガイドがIdentifying Phishing or Spoofed E-mailsにある．たぶんamazon.comを語るフィッシングが多いんだろう．
以下フィッシングメールの内容．一部略及び*で隠してある．*************
Return-path: ＜anonymous@unitreth.***＞
Received: from unitreth.*** (unitreth.*** [***.170.103.123])by ***
Received: (qmail ***** invoked by uid *****); Sun, 05 Feb 2006 21:12:51 +0000
Date: Sun, 05 Feb 2006 21:12:51 +0000
From: Amazon Account Update
Subject: FPA NOTICE: Amazon.com Registration Suspension - Action Required
To: ***
Message-id: <20060205211251.*****.qmail@unitreth.***>
Content-type: text/html;
Dear Amazon.com Customer,
Your bank has contacted us regarding some attempts of charges from your credit card via the Amazon system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your Amazon account Due to recent activity, including possible unauthorized listings placed on your account, we will require a second confirmation of your identity with us in order to allow us to investigate this matter further. Your account is not suspended, but if in 48 hours after you receive this message your account is not confirmed we reserve the right to suspend your Amazon registration. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of Amazon policy to represent oneself as another Amazon user. Such action may also be in violation of local, national, and/or international law. Amazon is committed t! ! o assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the full extent of the law.
To confirm your identity with us click the link bellow:
＜http://dili3.**/tmp/＞http://www.amazon.com/exec/obidos/sign-in.html
After responding to the message, we ask that you allow at least 48 hours for the case to be investigated. Emailing us before that time will result in delays. We apologize in advance for any inconvenience this may cause you and we would like to thank you for your cooperation as we review this matter.
Respectfully,
Trust and Safety Department
新着情報
