I got 7 emails today claiming to come from the Federal Reserve Bank. Plain text, no logo, and the From address is obviously not from the Federal Reserve (plus, why would the Federal Reserve Bank be contacting me about anything?). The details of the “transaction” differs on each message, but the text is basically the same as below. This article says the links deliver malware.
Senders:
Federal Reserve Bank Auto-Informer [woolgm@eoriginal.com]
Federal Reserve Bank Auto-Informer [crankshaftkv37@bernina.co.il]
Federal Reserve Bank Auto-Informer [alarmingly@porterorlin.com]
Federal Information System [oatenzee24@bmfp.org]
Federal Information System [completeu8@lsinter.net]
Federal Reserve Bank Auto-Informer [mimih327@multiform.at]
Federal Reserve Bank Auto-Informer [enthrallgf84@momix.org]
Subjects:
Same Day Transfer sent successfully
Same Day Transfer complete
Wire Transfer sent successfully
Immediate Transfer complete
Text:
We have successfully finished the following operation: *********************************************
Item #: 34226001
Amount: $5,137.05
To: Malik Tyson
Fee: 35.00
Send on Date: 10/16/2012
Service: Same Day
=============================================
If there is a problem with executing your request we will contact you both by email and on the Manage menu item. You can always check your transfer status right now Regards, Federal Reserve Bank Member Service =============================================
———————————————
Email Preferences This is a service message from Federal Reserve Bank. Please note that you may receive notification email in accordance with your service agreements, whether or not you elect to receive promotional email.
———————————————
Federal Reserve Bank Message, 7th Floor, 100 South Tryon, Street, Charlotte, SC 14360-0001
© Federal Reserve Bank.
Mark says
I got the same malware spam.
The link goes to davidherlihy.co.cc and is buried in the plugins folder. The guy probably doesn’t even know his site is compromised.
Cheers.
—————
We have successfully finished the following operation:
=============================================
Item #: 62633444
Amount: $25,113.01
To: Baker Adams
Fee: 19.00
Send on Date: 10/16/2012
Service: Same Day Wire transfer
———————————————
If there is a problem with carriage of your demand we will notify you both by email and on the Messages menu item. You can always check your transfer status via this link Regards,
Federal Reserve Bank Member Service
———————————————
*********************************************
Email Preferences
This is a notification note from Federal Reserve Bank. Please note that you may receive automated messages in accordance with your service agreements, whether or not you elect to receive promotional email.
———————————————
Federal Reserve Bank Message, 9th Floor, 186 South Dale, St., Charlotte, UT 93787-0001
? Federal Reserve Bank.
Robert says
Yep, I see tons of malware links that lead to hacked web sites.
heru says
Hi, i dont really undestand about spamming. what is the purpose to redirect to hacked website? what is malware for? Thanks for sharing
Robert says
Heru: This article may help.