Sophisticated SPAM phishing!

[Texas_Signmaker]

This morning I got an e-mail from a sign company that we did business for in the past. They sent me a drop box link with a PDF for a bid. I was suspicious as to why it wasn't just attached to the e-mail so I called them. I couldn't get a hold of the lady (who is a real person) and went to e-mail her directly (not replying to the original e-mail) . "She" responded with "the file is large, kindly view though drop box". The e-mail had their logo and contact info and looked 100% legit. I proceeded to click it but Google warned me about a suspicious site and I didn't go any further. I e-mailed her back a screenshot and didn't get a reply. A few minutes ago she sent an e-mail saying she was hacked and not to open anything and acknowledged the hacker even sent replies.

Just wanted to warn you all that they are getting more clever now!

 

[Gino]

Believe it or not, had something similar to that just recently from a known customer, but they had no idea it was being done. It's everywhere.

 

[Notarealsignguy]

The word "kindly" is enough to know it's a scam. When they learn how to speak the same dialect as the person they are trying to ripoff, then they will have become more clever.

 

[Texas_Signmaker]

The word "kindly" is enough to know it's a scam. When they learn how to speak the same dialect as the person they are trying to ripoff, then they will have become more clever.

Yea that should of been a tip off too but I was distracted by Gino's gay pride parade sign talk this morning.

 

[Notarealsignguy]

Yea that should of been a tip off too but I was distracted by Gino's gay pride parade sign talk this morning.

well that would explain the texas plates on the pink chevette he was riding in

 

[OhioSigns]

Just received one last night from a customer. It was an encrypted zip file that supposedly contained a word document. I called him right away and he said he had a trojan horse and not to open it.

 

[Pauly]

Meanwhile my inbox is full of SEO and website related marketing spam

 

[Texas_Signmaker]

Meanwhile my inbox is full of SEO and website related marketing spam

Yea, and they are getting ballsy on there. They follow up with "why haven't you responded yet?"

 

[Pauly]

Yea, and they are getting ballsy on there. They follow up with "why haven't you responded yet?"

I noticed a lot of them say "reply with NO for us to remove you from our list" at the end of the email.
Very tempting, but... it also triggers me to think, if i reply, they know im active and will keep emailing me.
Although my friend actually replied "no" to a bunch and they stopped all the emails.

 

[GAC05]

I keep getting similar from this phishing site:
LinkedIn.com
All kinds of stuff from people I don't know.

 

[Notarealsignguy]

I keep getting similar from this phishing site:
LinkedIn.com
All kinds of stuff from people I don't know.

haha well then login to accept your endorsements and see who's looking at your profile. Strange site.

 

[IsItFasst]

Got two of these from two different customers within about 48 hours a week or so ago.

 

[netsol]

I keep getting similar from this phishing site:
LinkedIn.com
All kinds of stuff from people I don't know.

linkedin is a "legitimate" site (pesky, but legit)
but the seem to grab a list of contacts, and probably grab cc's from emails in your inbox

 

[FireSprint.com]

Enable 2 step verification to help prevent someone from hijacking your own inbox. It's not foolproof, but it makes it an order of magnitude harder for them to get to you. (And don't ever give out your 2 step verification code to someone who calls you for it. Just hang up.)

https://www.google.com/landing/2step/
https://support.microsoft.com/en-us...-account-b1a56fc2-caf3-a5a1-f7e3-4309e99987ca
https://www.facebook.com/help/148233965247823