Overclockers Australia Forums
OCAU News - Wiki - QuickLinks - Pix - Sponsors  

Go Back   Overclockers Australia Forums > Specific Hardware Topics > Networking, Telephony & Internet

Notices


Sign up for a free OCAU account and this ad will go away!
Search our forums with Google:
Reply
 
Thread Tools
Old 28th February 2011, 1:46 PM   #1
Badooleoo Thread Starter
Member
 
Badooleoo's Avatar
 
Join Date: Oct 2007
Location: Adelaide
Posts: 270
Default Scam emails using peoples personal details from PayPal

UPDATE: Seems everyone is getting this scam email, We have pretty much confirmed this has been caused via PayPal accounts.

Check your email used with PayPal to see if you received this email using your full name as stated in your PayPal account.

If you wear a tin foil hat you might want to change your password.
If you like to winge you can send an email to PayPal at https://www.paypal.com/au/cgi-bin/he...ontact-general (login required)

---

I just received a bogus email from "Adobe Incorporated" about adobe acrobat reader having a new version.

Now besides the email being put in the spam can and really doesn't concern me the scary thing is it was addressed using my real first and last name and sent to my personal email address.

I don't use my real name anywhere online and just about anywhere possible in the real world.

Be careful, damn marketing lists, NOT HAPPY! I'm pointing the finger at PayPal, its the only place that has my name and use this email address. there's no way to change your name there either.

Code:
from:    Adobe Incorporated <news@newman.cccampaigns.net>
reply-to:    Adobe Incorporated <news@adobe-new-downloads.com>
to:    (me at a personal email address)
date:    28 February 2011 12:29
subject:    Adobe Acrobat Reader latest version released ! Upgrade Available Now

Dear [FIRST NAME] [LAST NAME],

Adobe is pleased to announce that a new version of Acrobat PDF Reader was released today with new features, options and improvements.

http://www.adobe-new-downloads.com

What's new in this version :

* Read, search, and share PDF files.
* Convert to PDF.
* Export and edit PDF files
* Add rich media to PDF files
* Combine files from multiple applications
* Increase productivity and process consistency
* Streamline document reviews
* Collect data with fillable PDF forms
* Protect PDF files and content
* Comply with PDF and accessibility standards

To get more and upgrade to this version, go to  :

http://www.adobe-new-downloads.com

Start downloading the update right now and let us know what you think about it.

We're working on making Adobe Acrobat Reader better all the time !

Talk soon,

The people at Adobe       

Copyright  2011 Adobe Systems Incorporated. All rights reserved.
These are what some of the websites look like:



UPDATE: Anonymous baste.bin text, beware these domains
Code:
adobe-pdf-upgrades.com
skype-instant-download.com
skype-instant-update.com
2011-skype-center.com
2011-skype-center.net
2011-skype-center.org
acrobat-reader-downloads.org
adobe-acrobat-2011-upgrade.com
adobe-acrobat-upgrades.org
adobe-new-updates.com
adobe-new-upgrades.com
adobe-pdf-2011-upgrade.com
adobe-reader-upgrades.info
microsoft-licensing-center.com
official-skype-updates.com
skype-2011-downloads.com
skype-2011-downloads.net
skype-2011-downloads.org
skype-instant-upgrade.com
skype-instant-upgrades.com
adobe-new-downloads.com

- Also new 1st March 2011
http://www.official-adobe-software.org
UPDATE: seems some domains are not working now, also javascript on these sites is being run from secureonline.ru, secureonline.com from what ive seen of the working ones.

Other sites informing of this scam:

Last edited by Badooleoo; 4th March 2011 at 8:21 PM.
Badooleoo is offline   Reply With Quote

Join OCAU to remove this ad!
Old 28th February 2011, 1:53 PM   #2
kwhohasamullet
Member
 
kwhohasamullet's Avatar
 
Join Date: May 2006
Location: Perth, Australia
Posts: 152
Default

Pretty sure you will find that email is actually a phishing email... i think the domain www.adobe-new-downloads.com is a bit of a give away
__________________
Recommended Sellers: Kippa-Dee , MiniDisc, Lichey, Demonic2005, Linton, mobester
kwhohasamullet is offline   Reply With Quote
Old 28th February 2011, 1:57 PM   #3
Badooleoo Thread Starter
Member
 
Badooleoo's Avatar
 
Join Date: Oct 2007
Location: Adelaide
Posts: 270
Default

Yes but somehow my real name has been acquired.
Badooleoo is offline   Reply With Quote
Old 28th February 2011, 2:27 PM   #4
glasnt
Member
 
glasnt's Avatar
 
Join Date: Aug 2004
Location: Cuteville, ^␣^
Posts: 3,791
Default

Quote:
Originally Posted by Badooleoo View Post
Yes but somehow my real name has been acquired.
They could have gotten it from anywhere you use your real name. It happens.

Just don't download Adobe Reader from that link <_<
__________________
| glasnt<3 | System 1: Abacus running Gravity 9.81 + Friction | System 2: E8200, GTX465 + Win7 | System 3: Samsung ATIV Book 7 + Win8 | System 4: Galaxy SII |✧・゚:*✧・゚:* \(◕‿◕✿)/ *:・゚✧*:・゚✧ | <3^(1/0) |
glasnt is offline   Reply With Quote
Old 28th February 2011, 3:13 PM   #5
Crashoveride
Member
 
Join Date: Jun 2004
Location: Sydney
Posts: 154
Default

i got the same email today, except the link was to adobe-software-upgrades_dot_com

Dodgy as
__________________
Australian Gamer - Sydney Journalist
The GAP - GameArena Podcast Host
Twitter
Crashoveride is offline   Reply With Quote
Old 28th February 2011, 3:20 PM   #6
Badooleoo Thread Starter
Member
 
Badooleoo's Avatar
 
Join Date: Oct 2007
Location: Adelaide
Posts: 270
Default

Quote:
Originally Posted by glasnt View Post
They could have gotten it from anywhere you use your real name.
I think you missed the bit I said about I don't use my real name anywhere.
Badooleoo is offline   Reply With Quote
Old 28th February 2011, 3:22 PM   #7
Jobe
Member
 
Jobe's Avatar
 
Join Date: Jul 2002
Location: Brisbane, QLD
Posts: 2,870
Default

CONSPIRACY! been getting it for ages in my spam folder. link was a dead giveaway. Sad that you wouldn't have picked up on it being a scam if it weren't for using your name. You need to go back to your learner internet licence.
__________________
| My PCDB entry | OCAU Extreme Cooling Club H2O Member | ANTEC/CHIEFTEC CASE OWNERS/MODDERS MEMBER #116 |

Quote:
Originally Posted by FiShy View Post
fat people = global warming
Jobe is offline   Reply With Quote
Old 28th February 2011, 3:25 PM   #8
qwertylesh
Member
 
qwertylesh's Avatar
 
Join Date: Aug 2007
Posts: 7,330
Default

please remove the URLS from your OP as theyre most likely malicious or would lead to something malicious.

I had these too btw.
I just add a rule if they get past the filter 'if in title' *skype* *2011* *adobe*
since its all bullshit, i just have it auto move to trash.
qwertylesh is online now   Reply With Quote
Old 28th February 2011, 3:28 PM   #9
Jobe
Member
 
Jobe's Avatar
 
Join Date: Jul 2002
Location: Brisbane, QLD
Posts: 2,870
Default

Quote:
Originally Posted by qwertylesh View Post
please remove the URLS from your OP as theyre most likely malicious or would lead to something malicious.

I had these too btw.
I just add a rule if they get past the filter *skype* *2011* *adobe*
since its all bullshit, i just have it auto move to trash.
and? this is supposedly a tech enthusiast forum.

www.click2downloadAvirus.ru

*whistles*
__________________
| My PCDB entry | OCAU Extreme Cooling Club H2O Member | ANTEC/CHIEFTEC CASE OWNERS/MODDERS MEMBER #116 |

Quote:
Originally Posted by FiShy View Post
fat people = global warming
Jobe is offline   Reply With Quote
Old 28th February 2011, 3:30 PM   #10
Tinian
(Taking a Break)
 
Join Date: Jan 2009
Location: localhost
Posts: 10,369
Default

Quote:
Originally Posted by qwertylesh View Post
please remove the URLS from your OP as theyre most likely malicious or would lead to something malicious.


Quote:
I had these too btw.
I had them months ago. Since updates come through adobe and not my email, I instantly flagged it as bullshit. A quick look at the address confirms it.

Quote:
Originally Posted by Jobe View Post
and? this is supposedly a tech enthusiast forum.

www.click2downloadAvirus.ru

*whistles*
Tinian is offline   Reply With Quote
Old 28th February 2011, 3:36 PM   #11
FrIdGe
Member
 
FrIdGe's Avatar
 
Join Date: Jul 2001
Location: Near the Big Banana!
Posts: 616
Default

Do you have any domain names and are you the technical/admin contact for them? That's how they got my details.
__________________
groophics - groophics on redbubble
FrIdGe is offline   Reply With Quote
Old 28th February 2011, 3:38 PM   #12
Badooleoo Thread Starter
Member
 
Badooleoo's Avatar
 
Join Date: Oct 2007
Location: Adelaide
Posts: 270
Default

Quote:
Originally Posted by Jobe View Post
CONSPIRACY! been getting it for ages in my spam folder. link was a dead giveaway. Sad that you wouldn't have picked up on it being a scam if it weren't for using your name. You need to go back to your learner internet licence.
Well if its taken this long for them to get my details then my internet licence must be pretty robust, hows yours chum?

Quote:
Originally Posted by qwertylesh View Post
please remove the URLS from your OP as theyre most likely malicious or would lead to something malicious.
Done

Quote:
Originally Posted by FrIdGe View Post
Do you have any domain names and are you the technical/admin contact for them? That's how they got my details.
No

On top of that searching my name brings up nothing, my email personal address is not used publicly.

Thats why I point the finger at PayPal (even eBay I use a different name from PayPal)

Last edited by Badooleoo; 28th February 2011 at 3:45 PM.
Badooleoo is offline   Reply With Quote
Old 28th February 2011, 3:42 PM   #13
Grant
Member
 
Join Date: Jan 2002
Location: Wollongong
Posts: 899
Default

I've got a couple of these emails to email addresses I wouldn't normally create accounts with, so I have a feeling they've been picked up from someone's private address book somewhere (eg. malware that scans through an address book or webmail accounts that have been hacked directly or indirectly through a contact export function) - that's probably why they have real names associated with some addresses.
Grant is offline   Reply With Quote
Old 28th February 2011, 3:43 PM   #14
qwertylesh
Member
 
qwertylesh's Avatar
 
Join Date: Aug 2007
Posts: 7,330
Default

I never go these until i began emailing chinese vendors, then bam, got heaps.
so thats where i point the blame.
qwertylesh is online now   Reply With Quote
Old 28th February 2011, 3:51 PM   #15
Jobe
Member
 
Jobe's Avatar
 
Join Date: Jul 2002
Location: Brisbane, QLD
Posts: 2,870
Default

Quote:
Originally Posted by Badooleoo View Post
Well if its taken this long for them to get my details then my internet licence must be pretty robust, hows yours chum?


Done


No

On top of that searching my name brings up nothing, my email personal address is not used publicly.

Thats why I point the finger at PayPal (even eBay I use a different name from PayPal)
I assume that's a photo of you looking hard on your deviantART profile? Do you strip out exif data from all image you upload?

EDIT: also you can't control what others put about you on the internets
__________________
| My PCDB entry | OCAU Extreme Cooling Club H2O Member | ANTEC/CHIEFTEC CASE OWNERS/MODDERS MEMBER #116 |

Quote:
Originally Posted by FiShy View Post
fat people = global warming

Last edited by Jobe; 28th February 2011 at 3:54 PM.
Jobe is offline   Reply With Quote
Reply

Bookmarks

Sign up for a free OCAU account and this ad will go away!

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +10. The time now is 11:54 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd. -
OCAU is not responsible for the content of individual messages posted by others.
Other content copyright Overclockers Australia.
OCAU is hosted by Internode!