WordPress.com Activate Phishing Scam

Yet another new phishing email, this time proporting to be a Wordpress.com activation email.

The Subject of the Wordpress.com phishing email is along the lines of: [WordPress.com] Activate http://(youremail).wordpress.com/. Mine was reports.wordpress.com.

The email is spoofed to appear to come from donotreply@wordpress.com , but that may be different in the email that you receive.

The WordPress.com Activate phishing email reads:

reports,

Thank you for signing up with WordPress.com.

You are one step away from blogging at reports.wordpress.com.
Please click this link to activate your blog:

http://signup.wordpress.com/activate/y83tb6nky70g81lr

If you did not recently register for WordPress (or if you registered with a different e-mail address),
click the following link to cancel the confirmation:

http://signup.wordpress.com/deactivate/u64fo5mnb37v77jo

–The WordPress.com Team

Chipsnchils.com

All of the links, in fact, go to http://www.chipsnchils.com/wordpress.html and when you reach the page, you are met with a Jsand 1.02.02 virus. I don’t know specifically what Jsand 1.02.02 is or does, but you can bet your bottom dollar that it’s malware and it’s either not good for your computer or your pocket. Don’t be tempted to click on the link - it takes you to chipsnchils.com, not Wordpress.com, so simply delete the email and forget about it.

If you receive an alternative version of the Wordpress.com Activate scam email, let us know any differences in email addresses, wording or the URL of the malware website, if it’s different from the chipsnchils.com address above by leaving a comment. The more info we receive in comments, the more terms that the article will appear for and the more people we can prevent from clicking links! 

3 Responses to “WordPress.com Activate Phishing Scam”

Rolf Says:

…the same is with “wikipedia.org” … the same Email .. with direct link zu Chipsnchils …

take care!

Someone from the IP address 117.205.19.129 has registered the account “fdczfu” with this e-mail address on the English Wikipedia.

To confirm that this user account really does belong to you and to activate e-mail features on Wikipedia, please open this URL in your browser:

link appears here

If you did not recently register for Wikipedia (or if you registered with a different e-mail address),

click the following link to cancel the confirmation:

link appears here

This confirmation e-mail will automatically expire at Thu, 1 Jul 2010 16:33:55 +0530

~Wikipedia, the free encyclopedia

Leonard Lyn Says:

I received the following which appears to be a variant. The links are spoofed and go to chipsnchils.com/wordpress.htm

_________
Someone from the IP address 124.8.139.55 has registered the account “lyn” with this e-mail address on the English Wikipedia.

To confirm that this user account really does belong to you and to activate e-mail features on Wikipedia, please open this URL in your browser:

link appears here

If you did not recently register for Wikipedia (or if you registered with a different e-mail address),

click the following link to cancel the confirmation:

link appears here

This confirmation e-mail will automatically expire at Thu, 1 Jul 2010 19:55:20 +0800

~Wikipedia, the free encyclopedia
en.wikipedia.org

ruby Says:

I just got this one with a wiki account activation message. Generally the same email other than the website being spoofed.

Leave a Reply





SEO Blog

SEO Blog

The Big Man's SEO blog is primarily aimed at website owners looking for ethical SEO tips, optimisation advice and who are interested in reading articles and opinions related to search engines, the internet, technology and software.