Scam emails using peoples personal details from PayPal

Discussion in 'Networking, Telephony & Internet' started by Badooleoo, Feb 28, 2011.

  1. Badooleoo

    Badooleoo Member

    Joined:
    Oct 25, 2007
    Messages:
    282
    Location:
    Adelaide
    UPDATE: Seems everyone is getting this scam email, We have pretty much confirmed this has been caused via PayPal accounts.

    Check your email used with PayPal to see if you received this email using your full name as stated in your PayPal account.

    If you wear a tin foil hat you might want to change your password.
    If you like to winge you can send an email to PayPal at https://www.paypal.com/au/cgi-bin/helpscr?cmd=_contact-general (login required)

    ---

    I just received a bogus email from "Adobe Incorporated" about adobe acrobat reader having a new version.

    Now besides the email being put in the spam can and really doesn't concern me the scary thing is it was addressed using my real first and last name and sent to my personal email address.

    I don't use my real name anywhere online and just about anywhere possible in the real world.

    Be careful, damn marketing lists, NOT HAPPY! I'm pointing the finger at PayPal, its the only place that has my name and use this email address. there's no way to change your name there either.

    Code:
    from:    Adobe Incorporated <news@newman.cccampaigns.net>
    reply-to:    Adobe Incorporated <news@adobe-new-downloads.com>
    to:    (me at a personal email address)
    date:    28 February 2011 12:29
    subject:    Adobe Acrobat Reader latest version released ! Upgrade Available Now
    
    Dear [FIRST NAME] [LAST NAME],
    
    Adobe is pleased to announce that a new version of Acrobat PDF Reader was released today with new features, options and improvements.
    
    http://www.adobe-new-downloads.com
    
    What's new in this version :
    
    * Read, search, and share PDF files.
    * Convert to PDF.
    * Export and edit PDF files
    * Add rich media to PDF files
    * Combine files from multiple applications
    * Increase productivity and process consistency
    * Streamline document reviews
    * Collect data with fillable PDF forms
    * Protect PDF files and content
    * Comply with PDF and accessibility standards
    
    To get more and upgrade to this version, go to  :
    
    http://www.adobe-new-downloads.com
    
    Start downloading the update right now and let us know what you think about it.
    
    We're working on making Adobe Acrobat Reader better all the time !
    
    Talk soon,
    
    The people at Adobe       
    
    Copyright © 2011 Adobe Systems Incorporated. All rights reserved. 
    These are what some of the websites look like:
    [​IMG][​IMG]


    UPDATE: Anonymous baste.bin text, beware these domains
    Code:
    adobe-pdf-upgrades.com
    skype-instant-download.com
    skype-instant-update.com
    2011-skype-center.com
    2011-skype-center.net
    2011-skype-center.org
    acrobat-reader-downloads.org
    adobe-acrobat-2011-upgrade.com
    adobe-acrobat-upgrades.org
    adobe-new-updates.com
    adobe-new-upgrades.com
    adobe-pdf-2011-upgrade.com
    adobe-reader-upgrades.info
    microsoft-licensing-center.com
    official-skype-updates.com
    skype-2011-downloads.com
    skype-2011-downloads.net
    skype-2011-downloads.org
    skype-instant-upgrade.com
    skype-instant-upgrades.com
    adobe-new-downloads.com
    
    - Also new 1st March 2011
    http://www.official-adobe-software.org
    UPDATE: seems some domains are not working now, also javascript on these sites is being run from secureonline.ru, secureonline.com from what ive seen of the working ones.

    Other sites informing of this scam:
     
    Last edited: Mar 4, 2011
  2. kwhohasamullet

    kwhohasamullet Member

    Joined:
    May 28, 2006
    Messages:
    152
    Location:
    Perth, Australia
    Pretty sure you will find that email is actually a phishing email... i think the domain www.adobe-new-downloads.com is a bit of a give away ;)
     
  3. OP
    OP
    Badooleoo

    Badooleoo Member

    Joined:
    Oct 25, 2007
    Messages:
    282
    Location:
    Adelaide
    Yes but somehow my real name has been acquired.
     
  4. glasnt

    glasnt Member

    Joined:
    Aug 9, 2004
    Messages:
    3,793
    Location:
    ✨✨
    They could have gotten it from anywhere you use your real name. It happens.

    Just don't download Adobe Reader from that link <_<
     
  5. Crashoveride

    Crashoveride Member

    Joined:
    Jun 2, 2004
    Messages:
    154
    Location:
    Sydney
    i got the same email today, except the link was to adobe-software-upgrades_dot_com

    Dodgy as
     
  6. OP
    OP
    Badooleoo

    Badooleoo Member

    Joined:
    Oct 25, 2007
    Messages:
    282
    Location:
    Adelaide
    I think you missed the bit I said about I don't use my real name anywhere.
     
  7. Jobe

    Jobe Member

    Joined:
    Jul 25, 2002
    Messages:
    2,879
    Location:
    Brisbane, QLD
    CONSPIRACY! been getting it for ages in my spam folder. link was a dead giveaway. Sad that you wouldn't have picked up on it being a scam if it weren't for using your name. You need to go back to your learner internet licence.
     
  8. qwertylesh

    qwertylesh Member

    Joined:
    Aug 21, 2007
    Messages:
    8,365
    please remove the URLS from your OP as theyre most likely malicious or would lead to something malicious.

    I had these too btw.
    I just add a rule if they get past the filter 'if in title' *skype* *2011* *adobe*
    since its all bullshit, i just have it auto move to trash. :)
     
  9. Jobe

    Jobe Member

    Joined:
    Jul 25, 2002
    Messages:
    2,879
    Location:
    Brisbane, QLD
    and? this is supposedly a tech enthusiast forum.

    www.click2downloadAvirus.ru

    *whistles*
     
  10. Tinian

    Tinian Member

    Joined:
    Jan 3, 2009
    Messages:
    13,309
    Location:
    15.0° N, 145.63° E
    :confused:

    I had them months ago. Since updates come through adobe and not my email, I instantly flagged it as bullshit. A quick look at the address confirms it.

    :thumbup: :lol:
     
  11. FrIdGe

    FrIdGe Member

    Joined:
    Jul 8, 2001
    Messages:
    616
    Location:
    Near the Big Banana!
    Do you have any domain names and are you the technical/admin contact for them? That's how they got my details.
     
  12. OP
    OP
    Badooleoo

    Badooleoo Member

    Joined:
    Oct 25, 2007
    Messages:
    282
    Location:
    Adelaide
    Well if its taken this long for them to get my details then my internet licence must be pretty robust, hows yours chum?

    Done

    No

    On top of that searching my name brings up nothing, my email personal address is not used publicly.

    Thats why I point the finger at PayPal (even eBay I use a different name from PayPal)
     
    Last edited: Feb 28, 2011
  13. Grant

    Grant Member

    Joined:
    Jan 23, 2002
    Messages:
    1,146
    Location:
    Wollongong
    I've got a couple of these emails to email addresses I wouldn't normally create accounts with, so I have a feeling they've been picked up from someone's private address book somewhere (eg. malware that scans through an address book or webmail accounts that have been hacked directly or indirectly through a contact export function) - that's probably why they have real names associated with some addresses.
     
  14. qwertylesh

    qwertylesh Member

    Joined:
    Aug 21, 2007
    Messages:
    8,365
    I never go these until i began emailing chinese vendors, then bam, got heaps.
    so thats where i point the blame.
     
  15. Jobe

    Jobe Member

    Joined:
    Jul 25, 2002
    Messages:
    2,879
    Location:
    Brisbane, QLD
    I assume that's a photo of you looking hard on your deviantART profile? Do you strip out exif data from all image you upload?

    EDIT: also you can't control what others put about you on the internets
     
    Last edited: Feb 28, 2011
  16. OP
    OP
    Badooleoo

    Badooleoo Member

    Joined:
    Oct 25, 2007
    Messages:
    282
    Location:
    Adelaide
    There's no name on DA and yes I do strip EXIF data on most of them. Still they don't contain names or addresses.
     
  17. OP
    OP
    Badooleoo

    Badooleoo Member

    Joined:
    Oct 25, 2007
    Messages:
    282
    Location:
    Adelaide
    LOL just for fun I decided to search my name on Google and all I found was a slutty looking black girl on facebook and twitter. Though her middle name was my first name.

    I don't use social fail sites.
     
  18. cvidler

    cvidler Member

    Joined:
    Jun 29, 2001
    Messages:
    10,859
    Location:
    Canberra
    Odd, OP's email sounds very close to a legit* Adobe email I got a few weeks back. I am a registered/licensed Acrobat (not reader) user.

    I figure the spammers got hold of one and are duplicating for phishing.

    *confirm URLs and email address backtrack was legit.
     
  19. Menthu_Rae

    Menthu_Rae Member

    Joined:
    Mar 19, 2002
    Messages:
    6,874
    Location:
    Northern Beaches, Sydney
    I also got this spam email and it had my real name. Obviously it's just spam/phishing/whatever. :rolleyes:
     
  20. wicky

    wicky Member

    Joined:
    Mar 8, 2009
    Messages:
    46
    Location:
    ?
    OMG I just checked my spam folder and also have the same message with my name and everything. I don't really get any spam with my name in it... :(
     

Share This Page