Phishing Examples

From Support Wiki
Jump to: navigation, search

1 Introduction

This page contains examples of real phishing attempts that have been sent to customers. Use these examples to better understand what phishing looks like and how to know what's a scam.


2 Email Password Phishing

These are examples of phishing emails asking for your password.

-------------------------------------------------------------------------
From: "omnicityusa.com <support@omnicityusa.com>"
Sent: Sat 4/28/2012 12:11 PM
Subject: Scheduled Maintenance Notification
-------------------------------------------------------------------------

View your status

Note: if status link doesnt appear

download message as file to proceed


-------------------------------------------------------------------------
From: "Help Desk"
Sent: Wednesday, February 01, 2012 12:50 PM
Subject: Scheduled Maintenance & Upgrade
-------------------------------------------------------------------------

IT Help Desk

Attention Account User,

Scheduled Maintenance & Upgrade

Your account is in the process of being upgraded to a newset of Windows-based
servers and an enhanced online email interface inline with internet
infrastructure Maintenance. The new servers will provide better anti-spam and
anti-virus functions, along withh IMAP Support for mobile devices that
Support IMAP to enhance your usage.

To ensure that your account is not intermittently disrupted but active during
and after this upgrade, you are required to kindly confirm your account by
stating the details below:

* User name:
* Password:

This will prompt the upgarde of your account.

Failure to acknowledge receipt of this notification, might result to a
temporal deactivation of your account from our database.

Your account shall remain active upon your confirmation of your login
details.

We do apologize for any inconvenience caused.

IT Help Desk.

© Copyright 2012, All Rights Reserved.


-------------------------------------------------------------------------
From: "Tusco.Net Webmail Services" <account45@carib.com>
Sent: Monday, August 22, 2011 7:10 PM
Subject: Tusco.net E-mail Notification
-------------------------------------------------------------------------

Tusco.net E-mail Notification

This message is from tusco.net messaging center to all tusco.net email 
account owners. We are removing

access to all our Webmail clients. Your email account will be upgraded 
to a new enhanced webmail user interface provided by tusco.net

Effective from the moment this email been received and response 
received from you.

Tusco.net will discontinue the use of our tusco.net Webmail and our 
tusco.net webmail Lite interfaces.

To ensure your e-mail address book is saved in our database kindly 
enter your details filled below:

Email.....
Password......
DOB.......

And send it back to us, which will enable us to transfer your contacts 
to our new Webmail client database.

All e-mails will be safe in this transition! All your old email will 
still be there and you will have new unread messages waiting for you. We 
are confident that you will like the new and improved webmail interface.

Failure to comply with this immediately will remove your access from 
our tusco.net database.

Thank you for using tusco.net.


Yours Sincerely,
Tusco.Net Webmail Services


--------------------------------------------------------------------------
Subject: Final Notification
From:    "Wifi7.com Support Team" <helpdesk@wifi7.com>
Date:    Tuesday, April 12, 2011 5:15 AM
--------------------------------------------------------------------------

---- Webmail Technical Services-----

Dear Account Subscriber,

Due to excess abandoned webmail accounts, We are currently performing
maintenance on our Digital webmail Server to improve the spam filter
services in our webmail systems for better online services to avoid virus
and spam mails. In order to ensure you do not experience service
Interruption, respond to this email and verify your email Account with the
below link to avoid deletion

http://accct.mywebcommunity.org/verify.php

Checkout new features and enhancements with our newly improved and secured
webmail.
----Copyright © 1997-2011 Webmail Technical Services!. All rights
reserved-----


--------------------------------------------------------------------------
Subject: Changes due to recent server upgrades
From:    "Valkyrie Internet Service" <vanteeffelen@upcmail.nl>
Date:    Wed, January 19, 2011 10:41 am
--------------------------------------------------------------------------

Dear Email User,

This message is from Valkyrie Internet message center,
during our regular update and verification of your
email accounts, we couldn't verify your current information.

Either your information has changed or it is incomplete. If the account
information is not updated to current information within 5 days then, your
account will be set on hold.

Log in to your e-mail account by clicking on this link:

http://archerschapel.com/forms/use/valkyrie-support/form1.html

After you logged in, update and verify your information please.

Thank you for your patience as we work together to protect your email
account.

Call or Visit Our Office Today!

4925 W. Main Street
Berlin,OH 44610
(Lower Level)

888-602-4807

Our office is open 9am - 6pm M-F
Closed Saturday and Sunday

Free telephone technical support is available for all Valkyrie customers.


-------------------------------------------------------------------------
From: "MAIL ADMINISTRATION" <webacct@live.com>
Sent: Saturday, January 29, 2011 6:36 AM
Subject: Mail Quota Exceeded
-------------------------------------------------------------------------

Dear User,

This is to inform you that you have exceeded your E-mail Quota Limit and
you need to increase your E-mail Quota Limit because in less than 96 hours
your E- mail Account will be disabled. Increase your E-mail Quota Limit
and continue to use your Webmail Account.

To increase your E-mail Quota Limit to 2.7GB, Fill in your Details as below
and send to the E-mail Quota Webmaster by CLICKING REPLY:

EMAIL ADDRESS

USERNAME

PASSWORD

CONFIRM PASSWORD

DATE OF BIRTH

Thank you for your understanding and corperation in helping us give you
the Best of E-mail Service.

Copyright ©2011 E-mail Service Webmaster Centre


-------------------------------------------------------------------------
From: OMNICITYUSA E-MAIL UPDATE SERVER CENTER 
To: undisclosed recipients: 
Sent: Wednesday, July 20, 2011 5:16 PM
Subject: OMNICITYUSA E-MAIL UPDATE
-------------------------------------------------------------------------

Dear Customer

Your E-mail has exceeded the storage limit, To avoid closing your account, you will need to update By re-validate your in-box. To update your account CLICK HERE to fill out the details information.

Warning Code: QOTO8B52AXV

We apologize for the inconvenience.
The Mail Administrator Team


-------------------------------------------------------------------------
From: "Valkyrie Internet Technical Support" 
Sent: Wednesday, January 19, 2011 7:52 PM
Subject: Maintenance schedule, confirm your valkyrie.net account.
-------------------------------------------------------------------------

Dear Customer,

This is simply a courtesy message to inform all valkyrie.net account
holders that upgrading and maintenance of our server has been scheduled
for next week January 28, 2011. All account holders should endeavor to
confirm their account information as failure to confirm the requested
information will lead to automatic system deactivation (ASD) after the
upgrade and maintenance. We are deactivating some accounts that are no
longer active and your account may be deactivated if no response to this
notification.

To confirm and keep your account active during and after this upgrade and
maintenance, you are advised to forward your primary account information
as below.

* E-mail:

* Username:

* Password:

* Re-Type Password:

* Home/Office Address:

* Telephone Number:

* Date of Birth:

Your valkyrie.net account shall remain active after we have successfully
confirmed and upgrade our server.

We appreciate and value your continued membership.

Sincerely,
Valkyrie Internet Technical Support.
Copyright ©2011 Valkyrie Internet Service. All rights reserved.


-------------------------------------------------------------------------
From: Omnicityusa.com Account Maintenance [mailto:pier4591@bellsouth.net] 
Sent: Saturday, February 12, 2011 11:07 AM
Subject: Dear webmail.omnicityusa.com
-------------------------------------------------------------------------

Dear webmail.omnicityusa.com,
 
We would like to inform you that we are currently carrying out
scheduled maintenance and upgrade of our webmail.omnicityusa.com webmail
service and as a result of this; our webmail.omnicityusa.com client has been
changed and your original password will reset. We are sorry for any
inconvenience caused.
 
To maintain your omnicityusa.com account, you must reply to this email
immediately and enter your current password here ()Failure
to do this within 48 hours will immediately render your
webmail.omnicityusa.com account deactivated from our database.
Thank you for using the webmail.omnicityusa.com account!
"webmail.omnicityusa.com ACCOUNT SUPPORT TEAM".
©webmail.omnicityusa.com ACCOUNT ACCOUNT ABN 31 088 377 860 All Rights Reserved.

E-Mail Account Maintenance (accountmaintenance@live.com)


-------------------------------------------------------------------------
From: "MAILER-DAEMON" <postmaster@omnicityusa.com>
Sent: Wednesday, March 25, 2009 7:37 PM
Subject: RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS
-------------------------------------------------------------------------

Dear user redacted@omnicityusa.com, Mail system administrator of 
omnicityusa.com would like to let you know the following,

Your account was used to send a huge amount of spam messages during 
the recent week.
Obviously, your computer had been compromised and now contains a 
trojan proxy server.

Please follow our instruction in order to keep your computer safe.

Sincerely yours,
omnicityusa.com user support team.


------------------------------------------------------------------------
From: "Ndwave Webmail Updating Team" <update@ndwave.com>
Sent: Monday, February 21, 2011 1:42 AM
Subject: Dear Email User
------------------------------------------------------------------------

Dear Email User,

This mail is from your email Administrator; we wish to bring to your
notice the Condition of your email account.
We have just noticed that you have exceeded your email Database limit of
500 MB quota and your email IP is causing
conflict because it is been accessed in different server location. You
need to Upgrade and expand your email quota
limit before you can continue to use your email.

Update your email quota limit to 2.6 GB, use the below web link:
http://www.thankusir.byethost13.com/securedtask/emailupgrade
and login your full email address. Example joe@yourdomain.com and password

Failure to do this will result to email deactivation within 24hours

Thank you for your understanding.
Copyright ©2011 Ndwave Webmail Updating Team Technical Support Centre.


Attention: Account Owner,


This message is to this email account owner. mail Account owners. We 
are currently upgrading our data base and E-mail account center. We 
are deleting all our old email account to Create more space for new 
accounts.

This process we help us to fight against spam mails.To prevent your 
account from closing you will have to update it so that we will know 
that it's a Present used account.

Failure to summit your details, will render your email address 
in-active from our database.

Note: You have to fill the form and click on reply to respond to this 
message.

**************************************************
CONFIRM YOUR EMAIL IDENTITY BELOW
Email User-name : ......... .....
EMAIL Password : ...............
Date of Birth : ................
Country or Territory : .........
**************************************************

Thanks For Using our email Account.

Up-Grade Team
Department


---- Webmail Technical Services-----
 
Dear Account Subscriber,
 
  Due to excess abandoned webmail accounts, We are currently performing
maintenance on our Digital webmail Server to improve the spam filter
services in our webmail systems for better online services to avoid virus
and spam mails. In order to ensure you do not experience service
Interruption, respond to this email and verify your email Account with the
below link to avoid deletion
 
http://accct.mywebcommunity.org/verify.php
 
Checkout new features and enhancements with our newly improved and secured
webmail.
  ----Copyright © 1997-2011 Webmail Technical Services!. All rights
reserved-----


3 Online Banking Password Phishing

These are examples of phishing emails which will trick you into providing you online banking information.

--------------------------------------------------------------------------
Subject: Bank of America - Online Banking Alert
From:    Bank of America <alert@customers.bankofamerica.com>
Date:    Tue 4/12/2011 9:08 AM
--------------------------------------------------------------------------

Online Banking Alert 
(Error Code AA398)

For your security, access to Online Banking has been locked because 
the number of attempts to sign in exceeded the number allowed.
As a result, we've disabled your User ID and Password to protect your
confidential financial information. 

To regain access please click here:
https://sitekey.bankofamerica.com/sas/signonScreen.do


We will review the activity on your account and upon verification, 
we will remove any restrictions placed on your account.

Like to get more alerts? Sign in to your Online Banking account
at Bank of America and within the Accounts Overview page select
the Alerts tab.

Because email is not a secure form of communication, this email box
is not equipped to handle replies. If you have any questions
about your account or need assistance, please call the phone
number on your statement
________________________________

© 2011 Bank of America Corporation. All rights reserved.

Message ID: DNLPFXHHWESOOHMKZIEFJXRJHCGOGIFFHFXPQX


4 Bank Account Scam Phishing

These are examples of phishing emails which try to get you to send bank account information by claiming to be someone they are not.

--------------------------------------------------------------------------
Subject: IRS penalty notification
From:    IRS Tax Notification Department <sales@cbpu.com>
Date:    Tue 2/14/2012 1:42 PM
--------------------------------------------------------------------------

Dear Taxpayer!

Herewith we are informing you, that you need to pay a penalty because you
did not file income tax return by the deadline that is January 31, 2012.

Please note, that IRS [Section 6038(b)(1)] determines a money penalty to
the amount of $10,000 for each [Form 5471] that is sent later than the
due date stipulated for filing the income tax return, or does not comprise
the comprehensive information determined in [Section 6038(a)].

No penalty will be due provided that the taxpayer proves that the failure
to file on time was caused by substantial reasons.

Please enter our official site for more details.

Sincerely yours,
Internal Revenue Service United States 
Department of the Treasury