123greetings.com phishing trojan scam
I’m sure very few will fall for this 123greetings.com phishing scam, unless it happens to be your birthday soon and you click on the (email address) has just sent you a birthday ecard email without checking it out first. However, these scam artists send out millions of these at a time - I received 15 this morning! - so if they even fool a tiny fraction of those targets into clicking on the link and downloading a trojan that gives the scammers access to personal details, they will have their result.
The subject of the 123greetings.com birday ecard email reads - jokingly12@robjordan.com has sent you a birthday ecard - but I also receive the same 123greetings birthday ecard email from 14 other random email addresses, probably generated from the same list that they used to send the trojan emails out in the first place, as mine were all in alphabetical order.
The email goes on:
Stacey [jokingly12@robjordan.com] just sent you an ecard from 123Greetings.com
You can view it by clicking here:
http://www.123greetings.com/send/view/05631010514011606136 - actually goes here (http://sonda.co.kr/index2.html)
You can also copy & paste the above link into your browser’s address bar.
Or if you prefer, you can go to http://www.123greetings.com/send/view/05631010514011606136 and type your
ecard number (05631010514011606136) in the “Search Box” at the top right of the page.
Your ecard is going to be with us for the next 30 days.
If you need any help in viewing your ecard or any other assistance,
please visit our Help/ FAQ section at: http://help.123greetings.com/
We hope you enjoy your ecard,
Your friends at 123Greetings.com
http://www.123greetings.com (http://sonda.co.kr/index2.html)
We respect your privacy. You will not be receiving any promotional emails from us
because of this ecard. To view our privacy policy, click on the link below:
http://www.123greetings.com (http://sonda.co.kr/index2.html)
Note: This is an auto generated mail. Please do not reply.
If you have any other problem please contact us by clicking on the following link:
http://www.123greetings.com (http://sonda.co.kr/index2.html)
This email was sent by 123Greetings.com, Inc., 1674 Broadway, New York, NY 10019.
If you receive a “has just sent you a birthday ecard” email that appears to be from 123greetings.com, the chances are, at the moment, its a phishing email containing a trojan download. How can you tell if it’s genuine? Simply use your mouse to hover over the links and if any of them don’t go to 123greetings.com and if the email is not personalised to you, it’s a scam email and you should delete it out of your machine straight away.
If you receive this or any variations of this, we’d love to hear from you. The more comments from different addresses and different content we receive, the more search terms will reach the front pages of Google and the more people that can be protected from the greetings123.com birthday ecard scam!
5 Responses to “123greetings.com phishing trojan scam”
July 1st, 2010 at 7:57 am
Yep got a 123greetings.com birthday ecard from sisterhoods @ rennerpetroleum.com today, links also going to the sonda.co.kr address. Thanks for the confirmation.
July 12th, 2010 at 5:25 pm
This is what I received today
Good day.
You have received an eCard
To pick up your eCard, open attached file.
Your card will be aviailable for pick-up beginning for the next 30 days.
Please be sure to view your eCard before the days are up!
We hope you enjoy you eCard.
Thank You!
July 23rd, 2010 at 12:39 pm
I’ve gotten what seems like DOZENS of these messages in the last few days!
Here’s the latest:
Good day.
You have received an eCard
To pick up your eCard, choose from any of the following options:
Click on the following link (or copy & paste it into your web browser):
reboundoregon.com
Your card will be aviailable for pick-up beginning for the next 30 days.
Please be sure to view your eCard before the days are up!
We hope you enjoy you eCard.
Thank You!
March 25th, 2012 at 2:05 am
I, TOO RECEIVED AN EMAIL SAYING I HAD A BIRTHDAY CARD FROM (EMAIL ADDRESS OF MY BROTHER) ON MY REAL BIRTHDAY. THE LINK IT SAYS TO CLICK ON IS NOT CLICKABLE, AND WHEN COPYING AND PASTING, THE MESSAGE SAYS THERE ARE “NO RESULTS”, AND JUST GIVES THE REGULAR LIST OF “123GREETINGS.COM”. THE CARD CANNOT BE PULLED UP WITH THE NUMBERS IT ASKS FOR, SO I ASSUME IT IS THE SCAM….I DID NOT DOWNLOAD ANYTHING, SO, DO YOU THINK I SHOULD BE SAFE?
THANKS….. If you haven’t opened any files, followed any links or given them any information, you should be fine, but do a virus check nonetheless. BM
July 1st, 2010 at 6:01 pm
Nice catch. Whats the remedy? As I see 123G has already imposed a “Ecard View Limit Exceeded” message.