Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

CONFIRMATION - WARNING! THIS IS A VIRUS!
12th November 2004

please forward any scams you've received to spoof@millersmiles.co.uk

Report Summary
Date Reported
12th November 2004
Apparent Sender
PayPal
Return Address
exchange-robot@paypal.com <exchange-robot@paypal.com>
Subject
CONFIRMATION
Format
HTML
Method

A new and dangerous email attack - Email uses tactics of phishers (notification of an unauthorised payment from your PayPal account) to persuade you to click on link to website. Website then downloads the Bofra virus onto your computer.

Bogus Web Content?
Yes
URL of web content

http://142.97.227.102:1639/

RISK LEVEL
VERY HIGH!!!
WARNINGS

1. Email claims to be from PayPal notifying you of a payment from your account. You haven't made it, so of course you panic and follow the link provided without thinking. This takes you to a website that downloads a malicious virus (Bofra) that then infects your machine.

2. Email is easy to spot as they tend to be bright yellow or green.

3. This is a new approach and breaking news - find out more here: http://news.bbc.co.uk/1/hi/technology/4004125.stm

4. URL traced to a server in Laval, Québec

5. This is not actually a phishing attack, but uses the same tactics to get users to visit a website.

 

"Congratulations! PayPal has successfully charged $175 to your credit card. Your order tracking number is A866DEC0, and your item will be shipped within three business days. "...

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

 

The Spoof Email ...


The Spoof Website ...

Very dangerous - Email itself does not contain a virus, but if you click the link in the email you will be taken to a website that does! The virus is called Bofra. For more information about its spread and affects see here: http://news.bbc.co.uk/1/hi/technology/4004125.stm

 
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide