BeBook Spam

clockworkzombie · 11-04-2010, 08:37 PM

I just received this spam email. The link at the bottom I have added spaces to is the address given to download the "bill"

The reason I am posting this is because I have purchased from the bebook website in the past and this spam email seems to be specifically targeted. I am now wondering if someone has been selling contact info.

From: My BEBOOK shopmanager <shop@mybebook.com>
Subject: Message from mybebook.com: Thank You For Your Order !

Thank You For Your Order N#:NMR45480SD5497

You have Make an Order in Our Website in 03 novembre 2010 .

http:// jackecruise. fileave.com /Bill.exe

Madam Broshkina · 11-04-2010, 09:56 PM

Apparently there website was hacked.

http://www.the-digital-reader.com/20...s-were-hacked/

clockworkzombie · 11-05-2010, 01:22 AM

Thanks for the link. That sounds about right. Luckily I have had two credit card changes since then.

FrancisT · 11-05-2010, 05:34 AM

If anyone has tried to run the .exe then please be aware that the statement by BeBook - http://mybebook.com/forum/viewtopic....st=0&sk=t&sd=a - that it didn't do much is optimistic. I checked the ip address (64.62.181.43) that jackecruise.fileave.com
resolves to in our database - http://threatstop.com/checkip.php is the
public version. It shows up as a ZeuS C&C host which suggests to me that
the comment quoted below is false.
Your PC might have been effected by a virus, which sends random
e-mails to your e-mail contacts, but only when using Outlook. This
only contains a random text message, and a copy of the file. Na data
can and will be retrieved from both sender or receiver.

If anyone were stupid enough to run that exe they have probably been
infected by the ZeuS trojan which steals banking passwords and the like

Run some ZeuS specific check/removal tools ASAP if in doubt.

11-04-2010, 08:37 PM	#1
clockworkzombie Connoisseur Posts: 99 Karma: 11962 Join Date: Feb 2010 Location: Central Queensland Device: iPad	BeBook Spam I just received this spam email. The link at the bottom I have added spaces to is the address given to download the "bill" The reason I am posting this is because I have purchased from the bebook website in the past and this spam email seems to be specifically targeted. I am now wondering if someone has been selling contact info. From: My BEBOOK shopmanager <shop@mybebook.com> Subject: Message from mybebook.com: Thank You For Your Order ! Thank You For Your Order N#:NMR45480SD5497 You have Make an Order in Our Website in 03 novembre 2010 . http:// jackecruise. fileave.com /Bill.exe Attached Thumbnails

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
PR-505 vs Bebook mini vs Bebook (5'' vs 6'' screens)	aliettedb	Which one should I buy?	12	02-03-2010 06:28 AM
First video footage of BeBook 2 and BeBook mini	ebookreaders	News	20	05-23-2009 06:58 AM
Disastrous firmware upgrade for many BeBook users: no excuses from BeBook!!!	Diogene	BeBook	86	12-10-2008 10:02 AM

11-04-2010, 09:56 PM	#2
Madam Broshkina Manic Do Fuse Posts: 2,312 Karma: 3325462 Join Date: Oct 2006 Device: Sony 500, 505, 350, Kindle 3, DXG, nook, Irex DR800SG, iPad	Apparently there website was hacked. http://www.the-digital-reader.com/20...s-were-hacked/

11-05-2010, 01:22 AM	#3
clockworkzombie Connoisseur Posts: 99 Karma: 11962 Join Date: Feb 2010 Location: Central Queensland Device: iPad	Thanks for the link. That sounds about right. Luckily I have had two credit card changes since then.

11-05-2010, 05:34 AM	#4
FrancisT Member Posts: 23 Karma: 65 Join Date: Mar 2008 Device: Cybook, Toshiba NB100	If anyone has tried to run the .exe then please be aware that the statement by BeBook - http://mybebook.com/forum/viewtopic....st=0&sk=t&sd=a - that it didn't do much is optimistic. I checked the ip address (64.62.181.43) that jackecruise.fileave.com resolves to in our database - http://threatstop.com/checkip.php is the public version. It shows up as a ZeuS C&C host which suggests to me that the comment quoted below is false. Your PC might have been effected by a virus, which sends random e-mails to your e-mail contacts, but only when using Outlook. This only contains a random text message, and a copy of the file. Na data can and will be retrieved from both sender or receiver. If anyone were stupid enough to run that exe they have probably been infected by the ZeuS trojan which steals banking passwords and the like Run some ZeuS specific check/removal tools ASAP if in doubt.

Advert