DTP


 
Lively discussions on the graphic arts and publishing — in print or on the web


Go Back   Desktop Publishing Forum > General Discussions > The Corner Pub

Reply
 
Thread Tools Display Modes
Old 06-30-2007, 02:12 PM   #1
ktinkel
Founding Sysop
 
ktinkel's Avatar
 
Join Date: Oct 2004
Location: In Connecticut, on the Housatonic River near its mouth at Long Island Sound.
Posts: 11,189
Default Phishing alert: Greeting card e-mail

An organization called Greeting Card Association has been attacked by a phishing scheme. Their name is being used to suck people into fake web sites. (The GCA has a warning message about this at their site.)

I only found it because even though I would not be surprised to hear from a relative and was tempted to follow the link I was saved by my longstanding rule never to click on any link in a message from a strange source (and only rarely from those I know, truth to tell).

So thought I would pass along this warning. The e-mail looks at least somewhat plausible. It begins like this (you can see the whole text at the GCA site from the link above):

Quote:
From: "greetingCard.Org"
To: [you]
Subject:You've received a postcard from a family member!
Date: Fri, 29 Jun 2007

Good day.

Your family member has sent you an ecard from greetingCard.Org.

Send free ecards from greetingCard.Org with your choice of colors,
words and music.

Your ecard will be available with us for the next 30 days. If you wish
to keep the ecard longer, you may save it on your computer or take a print.

[it goes on to provide links no one should ever click]

   
__________________
[SIZE=2][COLOR=LemonChiffon]::[/COLOR][/SIZE]
[SIGPIC][/SIGPIC]
ktinkel is offline   Reply With Quote
Old 06-30-2007, 02:14 PM   #2
annc
Sysop
 
annc's Avatar
 
Join Date: Oct 2004
Location: Subtropical Queensland, Australia, between the mountains and the Coral Sea
Posts: 4,436
Default

Yeah, I've been getting those for at least a week.

   
__________________
annc is offline   Reply With Quote
Old 06-30-2007, 09:42 PM   #3
Steve Rindsberg
Staff
 
Join Date: Nov 2004
Posts: 6,742
Default

I got one of these.

Every greeting card I've ever gotten has been from somebody with a name.

"From a family member" set off the alarm bells.

Most of my friends know not to send me this crap anyhow. It only gets them grumbled at. ;-)

   
__________________
Steve Rindsberg
====================
www.pptfaq.com
www.pptools.com
and stuff
Steve Rindsberg is offline   Reply With Quote
Old 07-01-2007, 06:13 AM   #4
ktinkel
Founding Sysop
 
ktinkel's Avatar
 
Join Date: Oct 2004
Location: In Connecticut, on the Housatonic River near its mouth at Long Island Sound.
Posts: 11,189
Default

Quote:
Originally Posted by Steve Rindsberg View Post
Most of my friends know not to send me this crap anyhow. It only gets them grumbled at. ;-)
Know what you mean. I usually only grumble under my breath, though.

Trying to talk to the truly naive and innocent about not deluging everyone they know with some cute junk from the web (some of it very old) is difficult they react as if I am rejecting them, rather than the stuff.

   
__________________
[SIZE=2][COLOR=LemonChiffon]::[/COLOR][/SIZE]
[SIGPIC][/SIGPIC]
ktinkel is offline   Reply With Quote
Old 07-01-2007, 08:20 AM   #5
iamback
Member
 
iamback's Avatar
 
Join Date: Oct 2005
Location: Amsterdam, NL
Posts: 4,894
Default

Oh, I'm getting a ton of those - I don't even open them. Genuine e-Cards tend to mention the actual *name* of the sender in the subject, or put the sender in the from. This never looked plausible to me...

   
__________________
Marjolein Katsma
Look through my eyes on Cultural Surfaces (soon!), My ArtFlakes shop and Flickr.
Occasionally I am also connecting online dots... and sometimes you can follow me on Marjolein's Travel Blog
iamback is offline   Reply With Quote
Old 07-01-2007, 10:00 AM   #6
Steve Rindsberg
Staff
 
Join Date: Nov 2004
Posts: 6,742
Default

I explain to my incurably forwarding-happy friends that my main account is for business and that I was NOT going to risk it or the computer I use it on for anything.

I give them a gmail address that I set up expressly for this kind of thing and ask them to use that for jokes/ecards/you-gotta-see-this-site links and whatnot. And I only open this account's email from a disposable virtual machine.

It's really pretty simple for them: use my regular addres when you want to start a new email but put the gmail on your "forward to known world" list.

I make a point of mentioning that if they need me for anything important to please send me email on the regular address.

But I pointedly mention that if they can't respect this simple request, I'll have no choice but to filter ALL of their email out.

   
__________________
Steve Rindsberg
====================
www.pptfaq.com
www.pptools.com
and stuff
Steve Rindsberg is offline   Reply With Quote
Old 07-01-2007, 10:31 AM   #7
Hugh Wyn Griffith
Member
 
Join Date: Jan 2005
Posts: 2,458
Default

Quote:
Originally Posted by ktinkel View Post
An organization called Greeting Card Association has been attacked by a phishing scheme. Their name is being used to suck people into fake web sites. (The GCA has a warning message about this at their site.)


See also:
Riding out yet Another Storm Wave
The wave continues - Subject line variation
on the SANS diary.

The first one gives a subject line & a lot of technical details and the second some additional new subjects.

I had one the other day -- originated in HK.

   
__________________


Hugh
Hugh Wyn Griffith is offline   Reply With Quote
Old 07-01-2007, 11:46 AM   #8
ktinkel
Founding Sysop
 
ktinkel's Avatar
 
Join Date: Oct 2004
Location: In Connecticut, on the Housatonic River near its mouth at Long Island Sound.
Posts: 11,189
Default

You are strict!

Well, I hate wrangling. But always err on the conservative side. Every so often someone says they tried to reach me and I find their e-mail in the junk drawer, but not that often.

   
__________________
[SIZE=2][COLOR=LemonChiffon]::[/COLOR][/SIZE]
[SIGPIC][/SIGPIC]
ktinkel is offline   Reply With Quote
Old 07-01-2007, 11:54 AM   #9
iamback
Member
 
iamback's Avatar
 
Join Date: Oct 2005
Location: Amsterdam, NL
Posts: 4,894
Default

Hmm - checking those links it seems there's no phishing involved at all - but malicious software installed on user's computers.

   
__________________
Marjolein Katsma
Look through my eyes on Cultural Surfaces (soon!), My ArtFlakes shop and Flickr.
Occasionally I am also connecting online dots... and sometimes you can follow me on Marjolein's Travel Blog
iamback is offline   Reply With Quote
Old 07-01-2007, 01:13 PM   #10
ElyseC
Sysop Emeritus
 
ElyseC's Avatar
 
Join Date: Oct 2004
Location: southeastern Iowa, in the technology corridor
Posts: 2,190
Default

Quote:
Originally Posted by Steve Rindsberg View Post
I got one of these.

Every greeting card I've ever gotten has been from somebody with a name.

"From a family member" set off the alarm bells.
Yep. Got my first fake one today and knew it was bogus when the sender wasn't identified in the subject line or "from" line.

Quote:
Most of my friends know not to send me this crap anyhow. It only gets them grumbled at. ;-)
E-cards are pretty popular in our family, because my kid loves picking them out and customizing them for his grandparents, teachers and friends. We grown-ups like them (especially my sisters and I), because we usually don't remember birthdays and anniversaries in time to drive to the store, wade through the greeting card racks, and stick the thing in the mail. If I don't remember the birthday of a far-flung sibling until 3:30p on the actual day, I can still get her a greeting "under the wire."

   
__________________
Elyse
ElyseC is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Forum offline 29 Jun 07 ktinkel How to Use the Forum 7 07-01-2007 02:04 PM
Alert: Private message spam ktinkel How to Use the Forum 8 05-19-2007 12:36 PM
Phishing or SPAM tactic? dthomsen8 Web Site Building & Maintenance 3 10-30-2006 11:12 AM
Thanks for birthday greeting! JVegVT The Corner Pub 24 07-09-2006 02:42 PM
Anti-phishing Firefox plugin Kelvyn The Corner Pub 6 03-11-2006 08:16 PM


All times are GMT -8. The time now is 01:20 AM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Contents copyright 2004–2014 Desktop Publishing Forum and its members.