WordPress.com Activate Phishing Scam
Yet another new phishing email, this time proporting to be a Wordpress.com activation email.
The Subject of the Wordpress.com phishing email is along the lines of: [WordPress.com] Activate http://(youremail).wordpress.com/. Mine was reports.wordpress.com.
The email is spoofed to appear to come from donotreply@wordpress.com , but that may be different in the email that you receive.
The WordPress.com Activate phishing email reads:
reports,
Thank you for signing up with WordPress.com.
You are one step away from blogging at reports.wordpress.com.
Please click this link to activate your blog:
http://signup.wordpress.com/activate/y83tb6nky70g81lr
If you did not recently register for WordPress (or if you registered with a different e-mail address),
click the following link to cancel the confirmation:
http://signup.wordpress.com/deactivate/u64fo5mnb37v77jo
–The WordPress.com Team
Chipsnchils.com
All of the links, in fact, go to http://www.chipsnchils.com/wordpress.html and when you reach the page, you are met with a Jsand 1.02.02 virus. I don’t know specifically what Jsand 1.02.02 is or does, but you can bet your bottom dollar that it’s malware and it’s either not good for your computer or your pocket. Don’t be tempted to click on the link - it takes you to chipsnchils.com, not Wordpress.com, so simply delete the email and forget about it.
If you receive an alternative version of the Wordpress.com Activate scam email, let us know any differences in email addresses, wording or the URL of the malware website, if it’s different from the chipsnchils.com address above by leaving a comment. The more info we receive in comments, the more terms that the article will appear for and the more people we can prevent from clicking links!
3 Responses to “WordPress.com Activate Phishing Scam”
July 1st, 2010 at 6:32 pm
…the same is with “wikipedia.org” … the same Email .. with direct link zu Chipsnchils …
take care!
Someone from the IP address 117.205.19.129 has registered the account “fdczfu” with this e-mail address on the English Wikipedia.
To confirm that this user account really does belong to you and to activate e-mail features on Wikipedia, please open this URL in your browser:
link appears here
If you did not recently register for Wikipedia (or if you registered with a different e-mail address),
click the following link to cancel the confirmation:
link appears here
This confirmation e-mail will automatically expire at Thu, 1 Jul 2010 16:33:55 +0530
~Wikipedia, the free encyclopedia
July 2nd, 2010 at 4:42 am
I just got this one with a wiki account activation message. Generally the same email other than the website being spoofed.
July 1st, 2010 at 9:00 pm
I received the following which appears to be a variant. The links are spoofed and go to chipsnchils.com/wordpress.htm
_________
Someone from the IP address 124.8.139.55 has registered the account “lyn” with this e-mail address on the English Wikipedia.
To confirm that this user account really does belong to you and to activate e-mail features on Wikipedia, please open this URL in your browser:
link appears here
If you did not recently register for Wikipedia (or if you registered with a different e-mail address),
click the following link to cancel the confirmation:
link appears here
This confirmation e-mail will automatically expire at Thu, 1 Jul 2010 19:55:20 +0800
~Wikipedia, the free encyclopedia
en.wikipedia.org