SecurePCNews Blog

News, information and resources you need to protect yourself when you go online.

Monday, April 14, 2008

1001 Postcards email scam

The fake e-card emails continue to spread around the internet. Here is yet another take on the virus delivering email. SecurePCNews.com recently alerted our readers to a growing form of virus scams using 'e-cards' as bait.

Here's another example that is rapidly spreading across the internet. This time the scam is using the brand of '1001 Postcards' to make the scam even more likely to trap unsuspecting email users.

Even clicking the link on these emails can infect your computer with a virus. Notice the link you're told to click ends in ".exe" That means that clicking this link will actually run a program on your computer. The program will install a virus on your PC. The virus might be there to steal your online banking passwords or send out SPAM emails that will look like they are coming from you. In either case, you don't want this virus on your PC.

If you've already clicked the link on this or similar emails we highly recommend getting at least a free virus scan of you PC. This can tell you if you've been infected and what you can do if you have.

The text from the email is included below (link has been changed so it won't work).

>>>>>>>>>>>>>>>>>>>>
From: webmaster@postcards.org [mailto:webmaster@postcards.org]
Sent: 04/08/2008 5:08 PM
To: ajones@riverbankconsulting.com
Subject: You have received a card from a family member!

You have received a card from a family member!

If you can‘t click on the web address above, you can also
visit 1001 Postcards

http://www.postcards.org/postcards/ and enter your pickup code, which is: a91-valets-cloud-mad

Oh -- and if you‘d like to reply with a postcard, you can do so by visiting this web address:

http://www2.postcards.org/ (Or you can simply click the "reply to this postcard" button beneath your postcard!)

Regards, 1001 Postcards
http://www.postcards.org/postcards/

You can pick up your postcard at the following web address:
http://www2.postcards.org/?a91-valets-cloud-31337

1001 Postcards and postcards.org are service marks of 1001 Media Group.
Copyright © 1997-2006 1001 Media Group.

>>>>>>>>>>>>>>>>>>>>

If you received an email like this, the safest thing to do is just delete it. If you have already clicked on the link you may have unknowingly downloaded a harmful PC virus. You should scan your PC for viruses now to check for spyware or any other malware.

If you don't have anti-virus software we recommend McAfee Security or PCSecurity Shield. Both provide great anti-virus protection at affordable prices.

Don't be a victim. Subscribe to the SecurePCNews.com monthly newsletter to learn about the latest internet and identity theft scams.

Labels: , , , ,

Sphere: Related Content

Hallmark E-card virus scam

Did you see this email in your inbox. Beware! It might be a virus attack.
Click the image to see the image in full size.

Hallmark e-card virus scam



SecurePCNews.com recently alerted our readers to a growing form of virus scams using 'e-cards' as bait.

Here's another example that is rapidly spreading across the internet. This time the scam is using the well known greeting card brand 'Hallmark' to make the scam even more likely to trap unsuspecting email users.

Even clicking the link on these emails can infect your computer with a virus. Notice the link you're told to click ends in ".exe" That means that clicking this link will actually run a program on your computer. The program will install a virus on your PC. The virus might be there to steal your online banking passwords or send out SPAM emails that will look like they are coming from you. In either case, you don't want this virus on your PC.

If you've already clicked the link on this or similar emails we highly recommend getting at least a free virus scan of you PC. This can tell you if you've been infected and what you can do if you have.

The text from the email is included below (link has been changed so it won't work).

>>>>>>>>>>>>>>>>>>>>
From: hallmark.com [mailto:E-Cards@hallmark.com]
Sent: 04/14/2008 7:10 AM
To: ajones@riverbankconsulting.com
Subject: You've received A Hallmark E-Card!

You have recieved A Hallmark E-Card.

Hello!

You have recieved a Hallmark E-Card.

To see it, click here,

There's something special about that E-Card feeling. We invite you to make a friend's day and send one.

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our policy.


Hallmark.com Privacy & Security Customer Service Store Locator

>>>>>>>>>>>>>>>>>>>>

If you received an email like this, the safest thing to do is just delete it. If you have already clicked on the link you may have unknowingly downloaded a harmful PC virus. You should scan your PC for viruses now to check for spyware or any other malware.

If you don't have anti-virus software we recommend McAfee Security or PCSecurity Shield. Both provide great anti-virus protection at affordable prices.

Don't be a victim. Subscribe to the SecurePCNews.com monthly newsletter to learn about the latest internet and identity theft scams.

Labels: , , , , ,

Sphere: Related Content

Friday, March 28, 2008

Virtual Postcard Email Virus Attack

Doesn't everyone liking getting an unexpected greeting card? That's certainly what the criminals who sent this email hope.

The email below says you've received a virtual greeting card but what you've really received is an attempt to place a virus on your computer.

How can you tell? Notice the link you're told to click ends in ".exe" That means that clicking this link will actually run a program on your computer. The program will install a virus on your PC. The virus might be there to steal your online banking passwords or send out SPAM emails that will look like they are coming from you. In either case, you don't want this virus on your PC.

If you've already clicked the link on this or similar emails we highly recommend getting at least a free virus scan of you PC. This can tell you if you've been infected and what you can do if you have.

The actual email is included below (link has been changed so it won't work).

>>>>>>>>>>>>>>>>>>>>
From: received@postcard.org [mailto:received@postcard.org]
Sent: 03/25/2008 7:17 PM
To: articles@riverbankconsulting.com
Subject: You have just received a virtual postcard from a friend !


You have just received a virtual postcard from a friend !


You can pick up your postcard at the following web address:

http://ubilab.sunmoon.ac.kr/xxxxxx/postcard.gif.exe

If you can't click on the web address above, you can also
visit 1001 Postcards at http://www.postcards.org/postcards/
and enter your pickup code, which is: d21-sea-sunset

(Your postcard will be available for 60 days.)

Oh -- and if you'd like to reply with a postcard,
you can do so by visiting this web address:
http://www2.postcards.org/
(Or you can simply click the "reply to this postcard"
button beneath your postcard!)

We hope you enjoy your postcard, and if you do,
please take a moment to send a few yourself!

Regards,
1001 Postcards
http://www.postcards.org/postcards

>>>>>>>>>>>>>>>>>>>>

If you received an email like this, the safest thing to do is just delete it. If you have already clicked on the link you may have unknowingly downloaded a harmful PC virus. You should scan your PC for viruses now to check for spyware or any other malware.

If you don't have anti-virus software we recommend McAfee Security or PCSecurity Shield. Both provide great anti-virus protection at affordable prices.

Don't be a victim. Subscribe to the SecurePCNews.com monthly newsletter to learn about the latest internet and identity theft scams.

Labels: , , ,

Sphere: Related Content

Wednesday, February 6, 2008

Phishing and Internet Scams - What Really Happens to Your Personal Information

Ever wonder what happens to your account information once it is stolen in a phishing, identity theft or spyware scam? The underworld of account hijacking, credit card fraud and ID theft are very complex and very profitable. These criminal operations involve sophisticated layers of specialists that rival large corporations.

Hackers use spyware and other malware to compromise unprotected computers and set up 'bot nets' of 'zombies' or 'robots' that can support large volumes of spam or steal you passwords as you type them. They can then sell access to the compromised computers to phishers. The phishers, who then set up the spoofed websites and send the fake emails to get your account information often aren't involved with the actual fraudulent charges that later appear. Instead they sell your account information to other criminals who have to capability to create fake cards or handle transfers or online bill payments out of your bank account (even if you don't use your online banking account). And the layers continue, making it virtually impossible to track or catch the fraudsters.

Unfortunately, it's possible that your Western Union, credit card or online banking account infomation has already been stolen and is for sale and you don't even know it, yet. Think about the last time you updated your anti-virus or anti-spyware software... The criminals set up websites and send out emails that list stolen accounts for sale. They even include the BIN numbers of the credit cards that identify what bank they are from and potential credit limits. Compromised online banking account creditials (user ids and passwords) are also available and give the purchaser access to whatever information and bill payment/transfer capability your online banking account provides.

SecurePCNews was able to get a copy of one email that is attempting to sell stolen account information. Notice that this single email includes offers for compromised accounts at what should be some of the most secure companies in the world including: Western Union, PayPal, Bank of America (BOA), Wachovia, Chase, Wells Fargo, Halifax and HSBC.

>>>>>>>>>>>>>>>>>>>>>>>
From: GLOBAL AGENCIES [mailto:[REDACTED]@yahoo.co.uk]
Sent: Wednesday, February 06, 2008 4:33 AM
To: [REDACTED]@yahoo.co.uk
Subject: BUY WESTERN UNION MONEY TRANSFER MTCN,CVV CREDIT CARD BANK TRANSFER LOGIN

LASTEST FOR SALE NEW WESTERN UNION MTCN WITH INFO FOR $4,600 = $380

1 Visa card.................................2$
1 master card.............................2$
1 amex card...............................3$
1 Discover card............................3$
1 Company card..........................6$
1 Uk Card Normal CC...................5$
1 UK Card Any Series ..................$6
1 Uk Card With DOB ...................6$
1 Track 1& 2 CC......................................15$
1 Fresh Fullz .........................................20$
1 Dead Fullz ..........................................12$

1 Paypal verified without balance==30$
1 Paypal verified with 2000$+ balance ==150$

BALANCE IN CHASE ..............................70K TO 155K($)
========360$
BALANCE IN WASHOVIA.........................24K TO
80K($)===========250$
BALANCE IN BOA.....................................75K TO
150K($)==========300$
BALANCE IN CREDIT
UNION................................................ANY AMOUNT($)=========400$
BALANCE IN HALIFAX...............ANY AMOUNT(£)=========420$
BALANCE IN HSBC...............ANY AMOUNT(£)=========420$
BALANCE IN ABBEY...............ANY AMOUNT(£)=========520$
BALANCE IN SMILES...............ANY AMOUNT(£)=========420$
BALANCE IN NATWEST...............ANY AMOUNT(£)=========420$
BALANCE IN COMPASS............................ANY
AMOUNT(£)=========370$
BALANCE IN WELSFARGO........................ANY AMOUNT($)=========320$
BALANCE IN WACHOVIA........................ANY AMOUNT($)=========320$
YOU CAN CONTACT FOR MANY MORE OTHER BANK LOG YOU NEED...


1 COMERSUS SOFTWARE WITH BANK LOG IN AND BANK CREDIT CARD CODE
==========1500$
2 COMERSUS SOFTWARE WITHOUT BANK LOG IN AND BANK CREDIT CARD CODE
==========1000$
3 NEW WESTERN UNION HACKING BUG FOR WORLD WIDE TRANSFER
====================400$
4 NEW PAYPAL LOG IN HACKWARE FOR HACKING FRESH PAYPAL
=======================250$
5 NEW SHOP ADMIN HACKWARE FOR HACKING ONLINE SHOP FOR CREDIT
CARD============620$
6 NEW CREDIT CARD AMOUNT CHECKER FOR PEOPLE WANTING TO KNOW AMOUNT ON
CC===120$
7 NEW CREDIT CARD VALIDATOR FOR VALIDATING ANY FULL CC INFO
=====================320$
8 ALL INBOX: MAILER, CPANEL-WEBMAIL: horde/squirel & neomail
==========$25
9 EMAIL LEADS: UAE,JP,CH,IT,FR,NL,DE,USA,UK,CA. MIXED COUNTRY
AVAILABLE==$30/1MB

OTHER SERVICE
INCLUDE..........................................................................................
BANK TO BANK TRANSFER TO ANY USA BANK
BANK TO BANK TRANSFER TO ANY UK BANK
BANK TO BANK TRANSFER TO ANY EURO COUNTRY BANK
AMOUNT TO PAY FOR THAT DEPEND ON AMOUNT YOU WANT TO TRANSFER


READ AND UNDERSTAND MY RULES AND REGULATION BEFORE YOU CONTACT ME
1 NO FREE FRESH OR DEAD CARD
2 NO TEST CARD
3 NO PLEASE AM POOR
4 NO I WILL PAY LATER YOU
5 NO TOO MANY CHAT
6 DO NOT MESSAGE ME IF YOU NOT READY TO BUY ANYTHING OR DEAL CUZ I'M
NOT WANT TIME WASTER
7 PAYMENT I ACCEPT: E-GOLD,C-GOLD,E-BULLION,PECUNIX,WESTERN UNION
AND MONEY GRAM
8 500$ ORDER LIMIT FOR WESTERN UNION & MONEY GRAM

BE VERY CAREFUL WHEN DEALING WITH SOMEONE DONT LOOSE YOUR MONEY TO FUCKING RIPPERS AND WE HOPE TO GIVE YOU THE BEST STUFFS YOU LOVE AND DONT FORGET WE NEED MORE CUSTOMER TO GIVE US MORE MONEY HERE PLEASE....

ON YAHOO MESSENGER ONLY .
INSTANT CHAT:[REDACTED]

TEL : I DONT GIVE OUT
>>>>>>>>>>>>>>>>>>>>>>>

Scary stuff, Right? Can you protect yourself from becoming a victim of identify theft or account hijacking? The great news is that there are lots of products and services that offer prevention and protection.

The first place to start is by protecting your PC. Companies like McAfee, Symantec and PCSecurityGaurd offer anti-virus, anti-spyware and firewall products that can prevent, detect and remove malware from your computer before you information is stolen.

Services like LifeLock and Identity Guard offer complete identity theft protection solutions and will even provide assistance if you even become a victim.

Lastly, make sure you watch your credit report. Often the first place that fraud shows up is in your credit report. New accounts can be opened in your name and it's not until you receive the first default notice that you even become aware of the problem. By that time it's your problem to deal with. We recommend Equifax Credit Watch services that monitors your credit report and notifies you of any suspicious account activity BEFORE it becomes a problem.

For more information about what to do if you think you may be the victim of identity theft visit SecurePCNews at where you can find specific information about dealing with Identity Theft, credit card fraud and other internet and email scams like phishing.

Subscribe to the SecurePCNews Newsletter to get information like this delivered to your email inbox as well as timely important tips on protecting yourself online.

About the Author: Aubrey Jones helped lead development of one of the first online banking solutions in the United States (all the way back in the old 26K modem dial up days). He then spent over a decade developing and managing internet banking services for one of the US's largest financial institutions. As an Internet Risk Manager he was responsible for protecting over 2 million online banking clients from theats like identify theft, phishing and account hijacking.

Labels: , , , ,

Sphere: Related Content

Friday, January 18, 2008

Malware Quietly Reaching 'Epidemic' Levels

New reports say malware increased by a factor of five to 10 in 2007

By Tim Wilson
Site Editor, Dark Reading

Everybody knew it was bad, but few knew it was this bad.

In separate studies released yesterday, two research firms now say that malware increased between 500 percent and 1,000 percent in 2007, and it shows no signs of slowing down.

** SecurePCNews.com Note: 'Malware' is short for Malicious Software. This is software designed specifically to damage or disrupt a computer system, such as a virus or a Trojan Horse. Most studies say that almost all home PCs are infected with some type of malware. You can learn more about Malware and how to find and remove if from your computer at SecurePCNews.com. **

"The number of new strains of malware that appeared in 2007 increased tenfold with respect to the previous year," said PandaLabs, Panda Security's research arm, in a report issued yesterday. "Over the last year, PandaLabs has received an average of more than 3,000 new strains of malware every day. This represents a malware epidemic which -- although silent, with little media coverage and no widespread alerts -- is nevertheless dangerous."
...

Experts at AV-Test, an independent testing organization, also reported skyrocketing incidence of malware yesterday. After a detailed count, the organization said it identified nearly 5.5 million different malware files in 2007 -- more than five times as many as in 2006.
...

In 2007, AV-Test found almost 5.5 million such files, up from about 973,000 in 2006 and 333,000 in 2005, the report said. And the trend is accelerating: The group already has identified more than 118,000 different malware files in the first two weeks of January.
...

Several security companies are leading the effort to help you protect your computer form malware. McAfee, PCSecurityShield, and Symantec

To read the full story visit the Dark Reading website.

Labels: , , , , ,

Sphere: Related Content

Friday, October 5, 2007

Alert - Wachovia Alert Phishing Scam

You may have received the following email. If so you are the target of an eMail Scam, commonly called a "Phishing" scam. Following the link included in the email could result in financial and identity loses. For more information about phishing visit SecurePCNews are review the article entitled "Don't get hooked by a phisher."

Following is the text of the Scam email message:

>>>>>>>>>>>>>>>>>>>>>>>

-----Original Message-----
From: Wachovia Alert [mailto:onlineservices@wachovia.com]
Sent: Friday, October 05, 2007 9:30 PM
To: undisclosed-recipients:
Subject: Update your online banking

Dear Valued Customer,

Wachovia Internet Banking, is here by announcing the New Security Upgrade.
We've upgraded our new SSL servers to serve our customers for a better and
secure online banking service, against any fraudulent activities. Due to this recent upgrade,
you are requested to update your online account access by
clicking on the following reference below.

Reference*

http://www.wachovia.com/secure/update/ssl.cfm

Regards

© 2007 Wachovia Corporation. All rights reserved.


>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
If you received an email like this, the safest thing to do is just delete it. If you have already clicked on the link you may have unknowingly downloaded a harmful PC virus. You should immediately run a full virus scan to check for spyware or anyother malware.

If you don't have anti-virus or anti-spyware software, visit our online shop for a number of brands you can purchase online and download from Office Depot.

If you provided any information such as your online banking login information or any other personal inforation you may be at risk for fraudulent financial transactions. You should immediately contact your financial institution for assistance. For more information about what to do if you think you may be the victim of a phishing email visit SecurePCNews.

Labels: , , , , ,

Sphere: Related Content