Monday, July 30, 2012

Target Gift Card SMiShing Scam


I just received a text message prompting me to visit www.target.com.tthj.biz and enter the "winning code" they sent, to claim a free $500 Target gift card.

Message sent from #1 440-752-4372 (Ohio area code)

I visited tthj.biz (through a secure proxy of course) and it appears virtually everyone who visits this site is a winner! I can assure you tthj.biz is not affiliated with the real Target corporation.

Domain info for tthj.biz
Registrar Internet.BS Corp info

This is probably a phishing attack, not just spam. In this case it's called "SMiShing". Smishing attacks are on the rise, says the BBB, and that "Many of these messages come with embedded links that can ultimately spread viruses to the phone if clicked."

According to the Charleston Gazette, "The text message provides a link to a fake Target website where recipients can "claim the prize" by entering personal information such as their name, address and social security number."

This attack isn't only aimed at Target customers, because I've never given Target my cell number, and I haven't heard anything about a Target website related database breach or hack. [Edit: Oh yes there was a huge Target database hack - revealed many months after this post]

Wednesday, July 18, 2012

Google Financial Agent Position Scam



DANGER

Internet & phone scammers are posing as Google employees, claiming to offer jobs as financial agents for Google. This is common wire fraud - Employment scam - Third party receiver of funds scam, same as in my previous post; Driver Wanted.

Again these crooks contacted me in response to an ad I'd posted in the resume/job wanted section of Craigslist. Email sent from: "Carl Lagger" : carl.financial.positions@gmail.com