Important Technical Service Message – FedEx Spam

Phishing fraud involving the various shipping companies continues its upswing, and a newer version of FedEx fraud is looking to steal legitimate user’s account credentials.

Emails typically arrive:

Subject:     Important Technical Service Message (CODE:90738-00)
From:     “FedEx Technical Support”<update@online-update.com>

The are not sent from any legitimate Federal Express server, but instead are sent through hijacked user accounts, the latest copy reviewed came to us through Verizon’s servers:

“from vms173003pub.verizon.net”

Also keep in mind that the “Code” number referenced in the subject line is completely fictitious and only exists to be randomized in order to try and avoid spam filtering systems.

The email itself looks like this:

 

Important Technical Service Message - FedEx Fraud

Click for Larger Image

 

 

The message asserts that FedEx will be closing down unused accounts and that:

In order to avoid the deactivation of your account, you will have to confirm your account

Problem is the Sign On hyperlink is not to Federal Express but instead links to a URL redirection service commonly used by spammers and online con artists:

http://tiny.cc/qk455

This URL shortener then redirects to the spammer’s actual Phishing landing page at:

http://seekertunes.com/banner/v/logon.do.htm

And when the Phish lands here, what they see is a spoof of a FedEx login page:

 

FedEx Phishing Fraud Login Page

Click for Larger Image

If you’re unfortunate enough to actually attempt to “log in” on this fake page, your username and password will be very efficiently transferred to the spammer.

The hijacked account will then be used to perpetrate as many online shipping fraud’s as possible (Fed/Ex is popular for shipping of fraudulent documents, bogus checks and all manner of stolen merchandise) before being shut down.

 

- -

OnlyMyEmail is an award winning hosted spam filtering service and business email hosting provider. Our enterprise cloud computing anti-spam solution, the MX-Defender, has the highest capture rate of any spam filter ever tested in the VBSpam Challenge, blocking a record setting 99.9993% of all malicious and junk email.

Our Personal spam filtering system is also a Software as a Service (SaaS) solution and has won both the PC World "World Class Award" and also the PC Magazine "Editor's Choice Award."

OME-Kids is a webmail solution that protects children from spam and other harmful emails. OME-Kids offers unique Parental Controls that allow you to choose the level of security and oversight that's right for your child.

Tags: , , , , ,

Comments are closed.