{"id":1216,"date":"2009-10-30T09:00:34","date_gmt":"2009-10-30T08:00:34","guid":{"rendered":"http:\/\/blog.intego.com\/?p=1216"},"modified":"2009-10-30T09:00:34","modified_gmt":"2009-10-30T08:00:34","slug":"an-interesting-new-phishing-technique-text-only-e-mail","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/an-interesting-new-phishing-technique-text-only-e-mail\/","title":{"rendered":"An Interesting New Phishing Technique: Text Only E-mail"},"content":{"rendered":"

We found an interesting phishing e-mail in our Spam mailbox this morning. (It got spam-filtered thanks to Intego Personal Antispam<\/a>.) Unlike the usual phishing e-mails, there were no links in this one. In fact, if it were not from the suspicious reply-to address, and the poor English, it could almost be believable. Here’s what it said:<\/p>\n

\nTHIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM This message is sent
\nautomatically by the computer.
\nIf you are receiving this message it means that your email address has
\nbeen queued for deactivation; this was as a result of a continuous error
\nscript (code:505)received from this email address. To resolve this problem
\nyou must reset your email address. In order to reset this email address,
\nyou must reply to this e-mail by providing us the following Information
\nfor confirmation.<\/p>\n

Current Email User Name : { \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\nCurrent Email Password : { \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\nRe-confirm Password: { \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}<\/p>\n

Note: Providing a wrong information or ignoring this message will resolve
\nto the deactivation of This Email Address.<\/p>\n

You will continue to receive this warning message periodically till your
\nemail address is been reset or deactivated.resolve\n<\/p><\/blockquote>\n

It is a simple technique for harvesting e-mail account info – user names and passwords – and we have the feeling that this might actually work. After all, many users are worried about entering their credit card numbers on-line, but may not be hesitant about sending an e-mail account password by e-mail.<\/p>\n

Well, let’s get down to it: do not ever send any confidential information by e-mail! Never! The simple reason for this is that e-mail goes through many servers, and can be intercepted at any location along its route. Even if you wanted to send a password or other confidential information to, say, your spouse, don’t use e-mail. Unless you have some sort of encryption, all that information is sent in clear text, readable by anyone who hacks a server and sniffs data.<\/p>\n

In this particular case, you should know that no network administrator will ask for your password by e-mail. They would call you, or, if it were for a business e-mail address, probably stop by your desk. In addition, there’s no reason to ask for a password to resolve any kind of incident with an e-mail account. <\/p>\n

Just remember: phishing can come in many forms. Never send any confidential information by e-mail. Period.<\/p>\n","protected":false},"excerpt":{"rendered":"

We found an interesting phishing e-mail in our Spam mailbox this morning. (It got spam-filtered thanks to Intego Personal Antispam.) Unlike the usual phishing e-mails, there were no links in this one. In fact, if it were not from the suspicious reply-to address, and the poor English, it could almost be believable. Here’s what it […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13],"tags":[102],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\t\n