Return to the Computer Help Forum | Post a Follow-Up

 o
Very odd email

Posted by Sue-va (My Page) on
Mon, Dec 23, 13 at 15:03

Sir/Madam,

Your order WM-009672196 delivery has failed because the address was not specified correctly. You are advised to fill this form and send it back to us.

If your reply is not received within one week, you will be paid your money back but 17% will be deducted since you order was booked for Christmas holidays.

2013 Wal-Mart Stores, Inc.

Where it says this form there is a clickable link that takes you to WIN ZIP. I tried it again today and it goes to STRATO, but not available.

I know this is not legit, because I had not ordered anything from Wal-Mart, but out of curiosity, I followed the link. I wondered if anyone else has gotten it, or something similar?

So after a week, and they haven't received my reply, I will be repaid my money back minus 17%?

Okay, I'll be waiting!

Sue


Follow-Up Postings:

 o
RE: Very odd email

It is a phishing email. Obviously they are searching for your info and since you replied they have verified your email address. Change your password asap at the very least.


 o
RE: Very odd email

and in future, BEST NEVER TO OPEN email which you feel cannot possibly be legit. Just opening it can be harmful & that's exactly what they got you to do. AND NEVER OPEN THE ATTACHMENTS ESPECIALLY!


 o
RE: Very odd email

I agree with pirate_girl. Best not to let them entice you into opening it.

Searching gives many results that it's a phishing email but at least one person stated that when they opened the attached zip file, it included an executable. I don't know if that's true or not.

I have no idea what/who "STRATO" is but perhaps if it really failed to open you're okay? I'd still scan, probably even before rebooting, just in case something bad got extracted to an autostart location.

I'm no expert though, especially when it comes to malware. Just sharing my "what I'd do".


 o
RE: Very odd email

I agree, never click on a link "out of curiousity". The next time you do that, your reward could be a nasty virus.


 o
RE: Very odd email

Thanks for all the replies.

Of course I know all the whats and what nots to do regarding these types of emails. I cut my PC teeth here at this forum many years ago.

Actually my question was "I wondered if anyone else has gotten it, or something similar?"

Sue


 o
RE: Very odd email

Please update and run all your AVs and malware detection applications. There was an alert a little while back warning users of fake delivery e-mails which included a hyperlink. When the user clicked on the link besides the appearing page malware was also downloaded.

A basic Google search using the keywords "e-mail delivery malware" (sans quotes) should provide you all you might want to know on the issue.

A ditto to not opening unknown/unsolicited e-mails.

DA


 o
RE: Very odd email

I have gotten a number of emails which looked legit, luckily I've learned to check carefully before clicking on them. One was from Amazon. But it had a .uk after Amazon. Then there was one from American Airlines concerning flight changes (again .uk) and I didn't make any travel arrangements.

These emails looked legit. They all required opening attachments. I just dumped them in spam.

Jane


 o
RE: Very odd email

Your order
WM-008792532
delivery has failed because
the address was not specified correctly. You are advised to fill
this form
and send it back to us.

If your reply is not received within one week, you will be paid your
money back but 17% will be deducted since you order was booked for
Christmas holidays.

---------------------------------------------

I had just deleted this from my junk mail when I saw your post so went back to see what it said. (I was curious to see if it might be the same right down to the order #.) I checked it, right clicked, selected origin and was able to read it with all the coding showing. Mine came from amychen.hojo.china. Back into delete and empty.


 o
RE: Very odd email

Sir/Madam,

Your order WM-001007141 delivery has failed because the address was not specified correctly. You are advised to fill this form and send it back to us.

If your reply is not received within one week, you will be paid your money back but 17% will be deducted since you order was booked for Christmas holidays.

2013 Wal-Mart Stores, Inc.
.......

Sir/Madam,
Your order BBY-6559770416 has not been delivered because the specified address was not correct.
Please fill this form and send it back with your reply to this message.

If we do not receive your reply within a week we will pay your money back less 17 because your order was reserved for the time of Christmas holidays.
Best Buy.

>>>>>>>>>>>>>>>>>>>>>>>>>

I got those,,, 2 from Walmart, 1 from best buy.
Here's the spooky part..... I had actually logged into best buy on the date matching theirs, but didn't buy anything.... and had been in and out of Walmart grocery a couple times and did actually place an order for grocery delivery. They matched the dates.

I did different full scans here.. nothing. I was guessing BestBuy and Walmart share some service and its hacked in some way. Best Buy had clicked a link to see some emailed special... but Walmart I went direct from address bar.

The PDF they offer inside the zip file is an exe but it doesn't scan as a baddy. I didn't open or try to peek the one exe which was some .ru download.


 o
RE: Very odd email

Each of these phony messages (and all the others I've seen) have something in common - they contain one or more errors of language or grammar. That's the telltale, forget the rest.

They may look legit, they may have the right company logos, so what? Ignore what you think is a coincidence or if (simply through chance) it's consistent with something else you did.

Delete them upon receipt and never click a link or open an attachment for these attempted attacks.


 o
RE: Very odd email

I've been getting some some emails that say that I am required to show up in court on such and such a date in a case in Calif. The last time I was in Calif was over 25 years ago when I was there for school in the US Navy. I didn't drive a car there because I didn't have one, so no traffic law was broken. I wasn't arrested for any thing so I think it is phishing attempt to get my info.


 o
RE: Very odd email

daylily-
It's another scam. Delete it and go on with your life....


 o
RE: Very odd email

Those always go to my spam folder. I love my hotmail and gmail accounts :-)


 o
RE: Very odd email

lily-
If you are ever in doubt about something that looks fishy, all you have to do is Google for a few keywords, or a phrase from the email. When I put in "spam court date" it came back with 18 million hits.


 o
RE: Very odd email

Well, if you shop on line like I do you can't arbitrarily disregard these type of e-mails nor do they just appear in the SPAM folder. The protocol I have established is the obvious. If the subject line contains the order number I have previously been provided at the conclusion of my transaction I consider it safe, No order number, it is deleted without opening.

DA


 o
RE: Very odd email

of course if you've ordered something and the order number matches, then you could consider it valid. Don't you mark junk mail as junk to train your email spam filter to send certain things to the spam folder, Damccoy? It really cuts down on junk mail.


 o
RE: Very odd email

As I use strict e-mail protocols I get almost no spam so I don't have to deal with it that often. On the extremely rare occasion I get an obvious one I usually just delete it.

If I marked say a phishing Chase e-mail as junk then how would I get my legitimate Chase e-mails? If I marked blindly a UPS e-mail how would I track a legitimate package? Just my thoughts.

DA

This post was edited by damccoy on Wed, Jan 1, 14 at 15:29


 o
RE: Very odd email

Well, you aren't blocking Chase, you are blocking the domain that the phishing scam is coming from. Those scam email aren't coming from your bank!

I mark stuff from Wal-Mart as 'junk' all the time and typically the junk mail goes to the junk folder, however after doing some online shopping, the real emails regarding my order came right to my inbox. If you are worried, you can always look in the Spam or junk folder prior to emptying it.

We all do what we do, your way is good too.


 o
RE: Very odd email

I usually don't click on notices of that sort, but several years ago, one ostensibly from UPS caught me good. I was expecting a package that very day and got a notification that they hadn't been able to deliver it. I took the bait and clicked on the link provided, which claimed that it would give me the details, and instead, I got a really nasty virus.

I like the advice given here not to click unless the correct order number appears in the email. Anyway, once bit, twice shy, and I am much more careful now.


 o
RE: Very odd email

Oh, no, I'm a defendant! I'll be sure to open this attachment.

Court hearing notice.

As a defendant you have been scheduled
to attend the hearing in the Court of New York.
Hearing date: 28 January 2014
Hearing time: 9:00 a.m.

Hearing subject: illegal use of software.
Prior to the court thoroughly study the plaint note in the attachment to this mail.

Sincerely,
Court agent,
Sandra Smith


 o
RE: Very odd email

Delightful, Breenthumb! lol. ...Though it might catch an unwary person who just happens to have a guilty conscience--or even someone completely innocent, considering the complexities of all the legal notices we are supposed to read and agree to before installing something, which we usually don't bother checking.


 o
RE: Very odd email

2014 January 17 19:11 GMT

Cisco Security Intelligence Operations has detected significant activity related to spam email messages that claim to contain a notification to attend a court hearing for the recipient. The text in the email message attempts to convince the recipient to open the attachment for review the details. However, the .zip attachment contains a malicious .exe file that, when executed, attempts to infect the system with malicious code.

Email messages that are related to this threat (RuleID8513) may contain the following files:

Plaint_Note_US_Copy_N0612.zip
Plaint_Note_17_01_2014US_Copy_Document.exe


 o Post a Follow-Up

Please Note: Only registered members are able to post messages to this forum.

    If you are a member, please log in.

    If you aren't yet a member, join now!


Return to the Computer Help Forum

Information about Posting

  • You must be logged in to post a message. Once you are logged in, a posting window will appear at the bottom of the messages. If you are not a member, please register for an account.
  • Please review our Rules of Play before posting.
  • Posting is a two-step process. Once you have composed your message, you will be taken to the preview page. You will then have a chance to review your post, make changes and upload photos.
  • After posting your message, you may need to refresh the forum page in order to see it.
  • Before posting copyrighted material, please read about Copyright and Fair Use.
  • We have a strict no-advertising policy!
  • If you would like to practice posting or uploading photos, please visit our Test forum.
  • If you need assistance, please Contact Us and we will be happy to help.


Learn more about in-text links on this page here