LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


Reply
  Search this Thread
Old 07-12-2016, 01:07 PM   #1
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,572
Blog Entries: 19

Rep: Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451
Would anyone actually be taken in by this?


This arrived in my in-tray today:
Quote:
Account Limination
PayPal
Dear Customer,

Your Account Is Suspended to Confirm your Identity.

Click on the button below

Click To Link
It's just about the most unconvincing phishing email that I've ever seen. Notice the weirdly misspelled title and the un-English nature of the text.

I know that well-constructed phishing emails do often work but why would any crook waste his time on this pathetic travesty?
 
Old 07-12-2016, 01:16 PM   #2
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
First attempt at their own work?

Last edited by Habitual; 07-12-2016 at 01:18 PM.
 
Old 07-12-2016, 01:22 PM   #3
Jeebizz
Senior Member
 
Registered: May 2004
Distribution: Slackware15.0 64-Bit Desktop, Debian 11 non-free Toshiba Satellite Notebook
Posts: 4,185

Rep: Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378Reputation: 1378
I had a disposable email and got tones of phishing - I actually replied to one entering in completely bogus info, and I actually got a off-script reply cussing and swearing at me because I wouldn't give them any real info
 
Old 07-12-2016, 02:07 PM   #4
Emerson
LQ Sage
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~amd64
Posts: 7,661

Rep: Reputation: Disabled
There was a study. They found it does not matter whether a scam is grammatically correct or not. People who know grammar do not fall for it regardless.
 
Old 07-12-2016, 02:49 PM   #5
MadmanRB
LQ Newbie
 
Registered: Oct 2015
Location: In your mind
Distribution: Linux Mint 19.1
Posts: 26

Rep: Reputation: Disabled
I got a fun one myself in my gmail spam folder, it reads:

Your package Atm Card have been registered with Post Office this morning and we agreed up that the delivery of your $65.11 compensation Parcel will take off tomorrow morning.So Get back with your full information, Contact Mr. Mike belly and TEL Number: +229-99-800- 785 Note,Try Send them the stamp Duty, fee of $40 with info bellow and the Tracking number of your package will be sent to you. receiver name CHIADI NNALUE country Benin republic question one answer LOVE amount $40usd Mr mark Ben

I am very tempted to actually activate its payload in virtual box under windows 10
 
Old 07-12-2016, 07:46 PM   #6
sgosnell
Senior Member
 
Registered: Jan 2008
Location: Baja Oklahoma
Distribution: Debian Stable and Unstable
Posts: 1,943

Rep: Reputation: 542Reputation: 542Reputation: 542Reputation: 542Reputation: 542Reputation: 542
Read the comments in any entry on any political site, even on social sites like Facebook or Google+, and you will know beyond any doubt that there are people who would fall for this, or any other scam extant.
 
Old 07-12-2016, 08:44 PM   #7
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,321
Blog Entries: 28

Rep: Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141
There's one born every minute.

The spammers send out thousands of these. All they need is for three or four persons to bite.

There was a period there a few months back when I was getting dozens of emails pretending to be from banks I've never dealt with (and some I wouldn't deal with on a bet).
 
Old 07-12-2016, 09:08 PM   #8
rknichols
Senior Member
 
Registered: Aug 2009
Distribution: Rocky Linux
Posts: 4,778

Rep: Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212
Quote:
Originally Posted by Emerson View Post
There was a study. They found it does not matter whether a scam is grammatically correct or not. People who know grammar do not fall for it regardless.
I've heard that the errors in grammar and spelling are quite deliberate. People with the "smarts" to notice the errors are not part of the target audience. The people sending those messages only want to hear back from those who are incapable of spotting the errors, and thus might be gullible enough to fall for the rest of the scam.
 
Old 07-13-2016, 01:45 AM   #9
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,572

Original Poster
Blog Entries: 19

Rep: Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451
Quote:
Originally Posted by rknichols View Post
I've heard that the errors in grammar and spelling are quite deliberate. People with the "smarts" to notice the errors are not part of the target audience. The people sending those messages only want to hear back from those who are incapable of spotting the errors, and thus might be gullible enough to fall for the rest of the scam.
There's a risk involved in that. I always try to notify the organisations concerned that their name is being taken in vain. Most financial institutions (including PayPal) have a "spoof address" to which such messages can be forwarded. And of course I make sure that all the headers and the actual links (as distinct from link text) are included so that the ISPs concerned can be notified and the sites taken down. I'm sure many other concerned citizens do the same. So if these people do deliberately flag themselves up as fake, it's counter-productive.
 
Old 07-13-2016, 04:29 AM   #10
Pastychomper
Member
 
Registered: Sep 2011
Location: Scotland
Distribution: Slackware, Devuan, Android
Posts: 132

Rep: Reputation: 243Reputation: 243Reputation: 243
I'd assumed the miss-spellings were a crude attempt to get past spam filters.
 
Old 07-13-2016, 02:16 PM   #11
rtmistler
Moderator
 
Registered: Mar 2011
Location: USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu, Debian
Posts: 9,882
Blog Entries: 13

Rep: Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930
Everytime I empty my spam filters I learn two or three things.

First stuff like this where you do wonder what suckers are out there a'la P.T. Barnum's dream.

Secondly, how much they know about my browsing habits.

Thirdly, "what" they know about my browsing habits and/or exceptions.

Funnily enough, in answering a question on LQ, I looked up 3-D rendering and that form of graphics. For many weeks/months I kept getting advertisements about animated characters, anywhere from completely dirty to just stupid/fun stuff. That's just so not me it's funny. Odd that a one-time 5 minutes of browsing caused that.

Odder so that 5-10 minutes or so per day reading stories on baseball, football, basketball, ... and I never really see ads for sports paraphernalia, or related stuff. You'd think with me repeatedly reading stuff about that, that they'd latch onto that aspect of my personality right away.

I guess ESPN and Fox Sports are too tame ... I don't even get advice telling me to, "Dodge, Duck, Dip, Dive, and .... Dodge!"

OK fine! They know about me and redheads! My wife knows too!

Last edited by rtmistler; 07-13-2016 at 02:18 PM.
 
Old 07-14-2016, 04:26 AM   #12
Pastychomper
Member
 
Registered: Sep 2011
Location: Scotland
Distribution: Slackware, Devuan, Android
Posts: 132

Rep: Reputation: 243Reputation: 243Reputation: 243
That reminds me of the time SWMBO 'borrowed' my account for a quick bit of underwear shopping. She didn't even buy any but I was still getting the ads over a month later - and I'm pretty sure most of the items wouldn't have fitted me anyway.
 
Old 07-14-2016, 08:40 AM   #13
Germany_chris
Senior Member
 
Registered: Jun 2011
Location: NOVA
Distribution: Debian 12
Posts: 1,071

Rep: Reputation: 497Reputation: 497Reputation: 497Reputation: 497Reputation: 497
I get those about once a month.

The first time I logged into paypal to check, now I just delete them
 
Old 07-20-2016, 12:56 AM   #14
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,572

Original Poster
Blog Entries: 19

Rep: Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451Reputation: 4451
Well, here's a new wrinkle. I got another one today, also ostensibly from Paypal. But when I checked the link it provided, by hovering my mouse over it, it looked like a respectable site selling park homes in Iowa. Not the sort of people who you would expect to be doing Paypal spoofs.

So I opened a browser window and searched for "parks custom homes Iowa" and found the site at once. In the search results, it was labelled "This site may have been hacked". And indeed it had been. The site took me directly to another site called Vivastreet that sells prostitutes. All foreign names too which suggests to me that these are probably trafficked women.

I'm not sure if this is real phishing or just a very nasty form of advertising.
 
Old 07-20-2016, 08:32 PM   #15
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,321
Blog Entries: 28

Rep: Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141
Quote:
I'm not sure if this is real phishing or just a very nasty form of advertising.
This sounds like a nasty form of advertising, but those two fish swim in the same pool.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 10:52 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration