Many people use libraries to access their e-mail and MySpace accounts. These people need to know that the phishers have latched onto MySpace notification e-mails. These e-mails are sent when you get new messages, friend requests, etc. They all look very similar and contain very little unique information.
The message below the fold appears to be a regular MySpace message notification e-mail, but the URLs and the sender are not standard MySpace addresses. I haven’t tried the links, but it’s a safe bet that they led to links that will ask for information that can be used for hacking activities. Although a close look reveals the e-mail to be fake, I think the first inclination of most MySpace users, including me, would be to click on the URL without reading the rest of the standard message. The only reason I didn’t is because my MySpace account is keyed to my home e-mail, so getting a MySpace message at work made me instantly suspicious.
Read more for text of phishy MySpace e-mail.
-----Original Message----- From: New MySpace Message [mailto:[email protected]] Sent: Thursday, October 05, 2006 8:58 AM To: [email protected] Subject: New message from Joseph on MySpace sent on Oct 05 10:50:00 -4 2006 You've got a new song from Joseph on MySpace! Click here to hear your MySpace music: http://myspace.mp3piat.com/?reloc.cfm=6&id=33277 Click here to get 5-free songs downloaded to Your Space: http://myspace.mp3piat.com/?reloc.cfm=6&id=3327764492_5free ------------------------- At MySpace we care about your privacy. We have sent you this notification to facilitate your use as a member of the MySpace service. If you don't want to receive emails like this to your external email account in the future, change your Account Settings to "Do not send me notification emails" Click here to change your Account Settings: http://myspace.mp3piat.com/?account.settings=update=6&id=33277 MySpace Inc. - 1900 Wilshire Blvd. 2109, Los Angeles, CA 90403-5400 USA )2006 MySpace Inc. All Rights Reserved -----------------
You and your patrons have been warned.
Really suspiscious
I thought it was really suspiscious because the links don’t go to my space, they are not even spoofed.
However what made it even more suspiscious is that I don’t have a my space account.
Re:Really suspiscious
I get stuff like that for e-bay all the time. I have never had an e-bay account, but in the case of those, they do look pretty official, so I can see some people fooled. They have gotten a bit daring too, using subject lines like “So and so is disputing a payment” or something to really grab a user’s attention. Overall, we need to really be vigilant. Interestingly, I don’t get them at my personal e-mail; I get them at my work e-mail. For all the “filtering” our system does, we have been pretty much farmed.
P.S. I have an account, but apparently been a while since I logged in and can’t get in now.