Fraudulent mail claiming to be sent from BEBOOK

[KunoK]

I got the following from "My BEBOOK shopmanager":
Message from mybebook.com: Thank You For Your Order ! Check The Email And Download Your Bill

Thank You For Your Order N#:NMR45480SD5497

You have Make an Order in Our Website in 03 novembre 2010 .


Click Here To Download The Bill


BEBOOK 2010
End of quote

On mybebook.com it says that it is a fraud and you should not click on the link. It does not say whether it is sent to people in the bebook customer list, or where the mailing list is from.

[jabberwock_11]

I got the same email, the obvious error of "you have make an order in our website" was the bit that made me instantly suspicious. I deleted it without even considering clicking on the link.

[Thrasher]

Virus alert! I was stupid enough to click on it, luckily my antivirus disconnected before any damage was done.

[Bittybye]

I got the email, I never even looked at the beBook when I was looking for a ereader. Thankfully I remembered a while ago hearing about a scam along the same lines and I deleted the email.

[EowynCarter]

It does not say whether it is sent to people in the bebook customer list, or where the mailing list is from.

For the record, it is VERY easy to send an email with someone else's adresse.

[Worldwalker]

Originally Posted by KunoK

I got the following from "My BEBOOK shopmanager"

No.

You got that email from someone purporting to be BeBook. I could send out email purporting to be from you, too, if I had your email address (or, if I didn't care if they contacted you, even without it) and it would never have to go within a thousand miles of your mailserver.

As I explained in the other thread on this subject, I routinely get phishing attempts for my Aion password ... despite the fact I've never in my life played Aion. The spammers cracked the email list of a specific forum (I know which one because I give out unique email addresses) and have randomly spammed those addresses on the theory that maybe someone who uses that forum plays Aion ... if I don't, they've lost nothing; if I'm smarter than a small zucchini, they've lost nothing; if I'm stupid enough to respond, they win. Before I disabled a particular public address, it was getting hit with "fraud" notices from banks I didn't have accounts or credit cards with; again, the phishers had nothing to lose and everything to win, so why not try and see if that address goes to a sucker who actually does have an account with a well-known bank which just doesn't happen to be mine?

Unless you give everyone you do business with a unique email address, so you know where the leaks are, all you know is that somehow, that address got into the hands of phishers, and those particular phishers are using that particular stunt to get you to install their trojans.

So, it's not BeBook's fault; they're at least as much of a victim as you are (or more; talk to someone on the receiving end of a "Joe job" sometime). If you read headers, you could find out what zombie computer sent the email, but that's unlikely to tell you anything useful. The bottom line is the same as always: Don't run executables. Don't use Outlook. Don't let your OS hide extensions. And don't muck around in things you don't expect, like "receipts" from companies you haven't bought from in the past hour.

[KunoK]

Thanks for the reply. I know, that "My BEBOOK shopmanager" is only the display name. I know, i have no chance of finding out who did this, and I also know that I could do nothing about it, if I could identify who did it.

It was implied in my post that the sender was someone imposing as BEBOOK. Personally, I did not click the link. My reasons for posting were these. 1) Trying to find out who else got it. 2)Warn people who might otherwise have clicked it.

I am also not trying to put blame on anyone (except people trying to trick other people).

But I do think it is interesting to know, where the bad guy got the email addresses from. Did he get them from bebook, from this forum, from another dealer? Did I, and the other recipients, expose our email addresses linked together with an interest in ebooks?

There might a hole that could be closed somewhere.

[Worldwalker]

Originally Posted by KunoK

I am also not trying to put blame on anyone (except people trying to trick other people).

Except BeBook.

Your title is "Fraudulent mail from bebook", not "Fraudulent mail from someone posing as bebook". There's a BIG difference.

As for finding out where the phishers got the email address, unless you have trackable addresses (have your own domain name and give everyone you do business with a separate address, then see which one the spammers hit) you can't. You might have mentioned your email address somewhere. It might have been stolen internally by some forum admin. It might have leaked in a number of ways. It might, like in the TJ Maxx incident, have been stolen in (or en route to) the back office. It could have something to do with ebooks, or the phishing could be totally random, like the ongoing attempts at getting me to give phishers my info for credit cards I don't own. If your email address is something moderately obvious, like fred@somewhere.com, they may just be hitting all the ordinary names -- at one point, that was happening to a catchall of mine. Without information you don't possess, you really can't figure out who, how, or where.

[KunoK]

Point taken. I had too much implied in the title. I was given the option of change the title, and I took it.

A small note, I believe i wrote "I am not trying to put blame on anyone". I might have been unsuccesfull, since I must admit reading the original title gives the impression that I actually think the mail is from bebook. However, it was never the intention to put any blame on bebook. I am sorry if that was the outcome.