Jump to content

Recommended Posts

Hi Pop Pickers,


Just had an email stating that I had been billed ?31.29 for a Led Zeppelin album, from iTunes.

I am a Led Zeppelin fan but do not order downloads - so a bit odd.

Then I noticed the link 'If you did not authorize this purchase' Click here for Refund.

Sure enough, I rang my bank and there has been no debit of this amount, so it was just someone trying to get me to put my bank details on line as seems to be the latest scam.


Watch out! Go and buy some vinyl albums from Sainsbury's instead

Link to comment
https://www.eastdulwichforum.co.uk/topic/140660-internet-scam-music-downoads/
Share on other sites

The are many 'phishing' emails going around. These are designed to make you think they are from some legitimate corporation. They are generally designed to do one of a couple of things:


1) either get you to hand over your login and password to a site they can get your money (through bank details or credit card details) or buy stuff on your account. So, generally banks, ebay, iTunes, Amazon, etc.


2) get you to either open an attachment or go to a website that will cause you to download something. This will install something bad onto you computer that will either hang around waiting for you to type in passwords, help in attacks on other sites or, as is common of late, encrypt everything on your computer and ask you for ransom money to restore it.


So, be very, very careful and look carefully at any email that asks you to click on a link or open an attachment. If you are worried, contact the business/government department or whatever, or log in the way you normally do, WITHOUT using anything from the email itself in term of links.


In general...


1) if the email does not refer to you directly by name, be suspicious. If it refers to you by your email address be very suspicious.


2) if the email says 'we need you to log in/change your password' because of some upgrade/security issue/something scary/money coming your way, be very suspicious.


3) if the email has an attachment, be really, really suspicious. NEVER open email attachments unless you are 150% sure the email sender is legitimate


4) if you are suspicious, hover your mouse (DO NOT CLICK) on the link that the email is asking you to click. The real address of the internet site will show up in at the bottom of your browser. If this does not look exactly as you would think, be extremely suspicious.


If you have clicked through and filled out a form with your login details, change your password NOW and contact the company to tell them something has happened. If you have opened an attachment, do not use your computer for anything financial and seek professional assistance.


There are bad people out there. They pose as business, banks, HMRC, parking tickets... just about everything you can think of. Be careful - and be suspicious.

Can anyone throw light on what happened here?


In December I emailed a client in Poland our work bank details. Some weeks later I found out from my contact in that company that several hours after my email arrived she received another one, which appeared to come from me but with different bank details. This is where she made a payment to.


She sent me the 2nd email she had received and on opening it and choosing 'reply' I saw the actual address for me was '[email protected]'. Not my address. My work PC was taken out of operation. However we have still no idea what has happened apart from something fraudulent.


I don't know how my work PC was compromised so it is all a bit of a mystery. Any ideas?

That's plausible apart from the bit I didn't mention. On the same day she received another email from 'me' which I would have had no reason to send.It had an attachment which related to an entirely different company. When she sent this fake email to me I saw it was from the same source as the previous one.


From this I deduced the problem was at our end. However the purpose of this 2nd fake email doesn't make any sense as it had nothing to do with a request for payment or contained anything particularly confidential.

Very odd...a test to see if emails from "your" address got through her spam filter, maybe? Or more sinister, could the irrelevant one have carried the virus, bot or whatever which opened up her inbox so they could read your mail and so send her the money demand? Which one did she get first?

It is easy to "copy" an email address - I'm not good with describing things... someone else can make it appear to a recipient that the email sent has come from someone else and there nothing anyone can do about it. It's not even considered "illegal" in itself although obviously the content is then questionable and such.


If you are sending someone personal details via email you really should break it up in different emails, with a different subject so it does not create a thread.


For the annoying purchase ones such as Itunes, Paypal, Amazon etc. After initially setting up your account you should assign your contact details to a different email address. That way you can easily identify, easily if it's hotmail/outlook that you get the suspicious emails from, whether they are genuine or not.


If you receive contact from any of the companies that you regularly deal with saying they've had trouble taking payment for something with a link to click always ignore it and sign in to your actual account to see if there is anything outstanding as a payment issue.

> If you are sending someone personal details via email you really should break it up in

> different emails, with a different subject so it does not create a thread.


A mail reader can thread messages in a mail folder using just the chain of references in the header, regardless of subject or even addressee. Your strategy, if it's to be reliable, should avoid sending the successive posts using the Reply button. Even then there's still more than enough information in the headers to enable them to be linked. Encryption, or splitting the content between different communication channels, is more advisable for high risk content.

Alan Medic Wrote:

-------------------------------------------------------

> Can anyone throw light on what happened here?

>

> In December I emailed a client in Poland our work

> bank details. Some weeks later I found out from my

> contact in that company that several hours after

> my email arrived she received another one, which

> appeared to come from me but with different bank

> details. This is where she made a payment to.

>

> She sent me the 2nd email she had received and on

> opening it and choosing 'reply' I saw the actual

> address for me was '[email protected]'. Not my

> address. My work PC was taken out of operation.

> However we have still no idea what has happened

> apart from something fraudulent.

>

> I don't know how my work PC was compromised so it

> is all a bit of a mystery. Any ideas?


Could have been your PC or email system, could have been hers. Doubtful is was anything in the middle.


As KK said, sending an email with spoofed (that's the word, Kel!) headers is trivially easy. Some services rely on this (e.g. Yahoo groups, mailchimp) Even Hotmail can do it, though they have controls in place to stop you doing it when you shouldn't.


So, all the bad people needed do was see the original email. From that they had all they needed - your name, her name and email address, plus the email text so they could create a plausible copy. So, they almost certainly saw it either in your sent mail or the recipient's inbox. Considering they didn't bother to delete the first email, I'd guess it was yours.


Are either your email or hers accessible from the internet? Most are these days, in one form or another.


Sounds like, for the second email, they messed up and meant to send it to a different victim.

ianr Wrote:

-------------------------------------------------------

> > If you are sending someone personal details via

> email you really should break it up in

> > different emails, with a different subject so it

> does not create a thread.

>

> A mail reader can thread messages in a mail folder

> using just the chain of references in the header,

> regardless of subject or even addressee. Your

> strategy, if it's to be reliable, should avoid

> sending the successive posts using the Reply

> button. Even then there's still more than enough

> information in the headers to enable them to be

> linked. Encryption, or splitting the content

> between different communication channels, is more

> advisable for high risk content.



I was in no was suggesting this is a "reliable" way at all.


Personally, one should not be sending details like bank numbers and such via email, but of course I understand for many people it is the only option.

What I was suggesting was simply a "IF". As mentioned by separate, not related emails - meaning not using the reply button (separate emails wouldn't require this). It is far from perfect but if you do not have the powers or knowledge to go through the encryption route, and this is your only option it can work still with risk.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Latest Discussions

    • Eh? That wasn't "my quote"! If you look at your post above,it is clearly a quote by Rockets! None of us have any  idea what a Corbyn led government during Covid would have been like. But do you seriously think it would have been worse than Johnson's self-serving performance? What you say about the swing of seats away from Labour in 2019 is true. But you have missed my point completely. The fact that Labour under Corbyn got more than ten million votes does not mean that Corbyn was "unelectable", does it? The present electoral system is bonkers, which is why a change is apparently on the cards. Anyway, it is pointless discussing this, because we are going round in circles. As for McCluskey, whatever the truth of that report, I can't see what it has to do with Corbyn?
    • Exactly what I said, that Corbyn's group of univeristy politics far-left back benchers would have been a disaster during Covid if they had won the election. Here you go:  BBC News - Ex-union boss McCluskey took private jet flights arranged by building firm, report finds https://www.bbc.com/news/articles/cp3kgg55410o The 2019 result was considered one of the worst in living memory for Labour, not only for big swing of seats away from them but because they lost a large number of the Red-wall seats- generational Labour seats. Why? Because as Alan Johnson put it so succinctly: "Corbyn couldn't lead the working class out of a paper bag"! https://youtu.be/JikhuJjM1VM?si=oHhP6rTq4hqvYyBC
    • Agreed and in the meantime its "joe public" who has to pay through higher prices. We're talking all over the shop from food to insurance and everything in between.  And to add insult to injury they "hurt " their own voters/supporters through the actions they have taken. Sadly it gets to a stage where you start thinking about leaving London and even exiting the UK for good, but where to go????? Sad times now and ahead for at least the next 4yrs, hence why Govt and Local Authorities need to cut spending on all but essential services.  An immediate saving, all managerial and executive salaries cannot exceed and frozen at £50K Do away with the Mayor of London, the GLA and all the hanging on organisations, plus do away with borough mayors and the teams that serve them. All added beauracracy that can be dispensed with and will save £££££'s  
    • The minimum wage hikes on top of the NICs increases have also caused vast swathes of unemployment.
Home
Events
Sign In

Sign In



Or sign in with one of these services

Search
×
    Search In
×
×
  • Create New...