It didn’t take long for this new years I guess for people attempting to try and scam others with the old e-mail spoofing routines. I got this e-mail that is dressed up in such a way where it made it appear that I have purchased an airline ticket from American Airlines. Attached to it is a file called \u201cTicket.zip\u201d which I would assume the person wants you to open it as it contains a computer trojan\/virus. This was the message:<\/p>\n
From – Mon Jan 02 13:47:11 2012
\nX-Account-Key: account6
\nX-UIDL: 1325516308.18592.pt01
\nX-Mozilla-Status: 0001
\nX-Mozilla-Status2: 10000000
\nX-Mozilla-Keys:
\nReturn-Path:
\nReceived: (fqmail 18591 invoked from network); 02 Jan 2012 14:58:28 -0000
\nReceived: (qmail 5268 invoked from network); 2 Jan 2012 14:58:27 -0000
\nReceived: from mail-out2.superb.net (mail-out2.superb.net [66.36.226.26])
\n by mx10.futurequest.net ([10.2.1.182])
\n with ESMTP via TCP; 02 Jan 2012 14:58:27 -0000
\nReceived: from sh-b4.dca2.superb.net (sh-b4.dca2.superb.net [207.228.240.77])
\n\tby mail-out2.superb.net (Postfix) with SMTP id 144142BD
\nReceived: (qmail 68076 invoked by uid 80); 2 Jan 2012 14:58:26 -0000
\nDate: 2 Jan 2012 14:58:26 -0000
\nMessage-ID: <20120102145826.68075.qmail@sh-b4.dca2.superb.net>
\nSubject: Your Order#2713747
\nX-PHP-Script: www.personalinjurylawyerservices.ca\/b899.php for 94.136.40.100
\nFrom: “American Airlines”
\nX-Mailer: lightbulbruffiansof6
\nReply-To: “American Airlines” <\/message>
\nMime-Version: 1.0
\nContent-Type:multipart\/mixed;boundary=”———-13255163064F01C612CE846″
\nX-CTCH-Spam: Unknown
\nX-CTCH-RefID: str=0001.0A020207.4F01C613.002C,ss=1,re=0.000,fgs=0<\/p>\n————13255163064F01C612CE846
\nContent-Type:text\/html;
\nContent-Transfer-Encoding: 8bit<\/p>\nHello<\/p>\n
FLIGHT NUMBER AA534<\/p>\n
ELECTRONIC 836950816<\/p>\n
DATE & TIME \/ JANUARY 31, 2012, 10:53 PM<\/p>\n
ARRIVING \/ Tallahassee<\/p>\n
TOTAL PRICE \/ 271.25 USD <\/p>\n
Please find your ticket attached. <\/p>\n
To use your ticket you should print it.<\/p>\n
Thank you for using our airline company services. <\/p>\n
American Airlines.<\/p>\n
————13255163064F01C612CE846
\nContent-Type: application\/octet-stream;name=”Ticket.zip”
\nContent-Transfer-Encoding:base64
\nContent-Disposition:attachment;filename=”Ticket.zip”<\/message><\/root><\/p><\/blockquote>\nBe smart for the new years and just ignore the e-mail. Otherwise you will probably have one additional computer repair expense. I did find it kind of interesting that in the header of the e-mail under \u201cX-PHP-Script\u201d as you can see it lists a lawyer’s firm. Makes me wonder if they are simply oblivious to this or if someone within their organization had a security mishap. <\/p>\n
There are probably going to be a lot more variations of this mail too though so while the information may not be exactly the same just don’t open the attachment. If you are really that paranoid on whether or not this is real then simply check your credit card first.<\/p>\n","protected":false},"excerpt":{"rendered":"
It didn’t take long for this new years I guess for people attempting to try and scam others with the old e-mail spoofing routines. I got this e-mail that is dressed up in such a way where it made it appear that I have purchased an airline ticket from American Airlines. Attached to it is […]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[6],"tags":[3482,546,3484,865,3483],"class_list":["post-3492","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-money-making-scams","tag-american-airlines","tag-email-spam","tag-lawyer-office","tag-scam","tag-spoof"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.al6400.com\/blog\/wp-content\/uploads\/2015\/04\/IMAG1057.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VnHC-Uk","_links":{"self":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/3492","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/comments?post=3492"}],"version-history":[{"count":2,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/3492\/revisions"}],"predecessor-version":[{"id":3494,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/3492\/revisions\/3494"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media?parent=3492"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/categories?post=3492"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/tags?post=3492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}