Copy
THE DAILY SCAM NEWSLETTER — MAY 27, 2020
Content Director Doug Fodeman | Creative Director David Deutsch | Issue 300


THE WEEK IN REVIEW

On a weekly basis we are reminded of this truism that “nothing is as it appears to be” when speaking about the Internet.  Everything you see, or participate in, can be artificially manipulated to someone else’s gain.  A particular aspect of this truism is the topic of this week’s Top Story as you’ll read below.  

The communications sent to us every week are often interesting, on many levels. Take, for example, this email from “Hedwig” sent through a server in Taiwan (2-letter country code = “.tw”)  Nevermind that “Hedwig” claims to be the “immediate past credit manager of SNS Bank in the Netherlands.”  Instead focus on the fact that the Subject line begins with Chinese characters before “Important email for you.”  Curious as we are, we used Google translate to see what the Chinese characters said.  It was “Suspect spam blacklist!”  (Mandarin is the official language of Taiwan.)  So it appears to us that some Internet filtering service in Taiwan recognized this email as a likely bit of spam and tacked on that message to the subject line, in Mandarin.  Considering that the email is clearly written in English, couldn’t the service identifying this fraud at least add the English translation too?



 

A friend of ours reached out recently to say that he was getting this pop-up message on his MacBook Air at least 30 times one day.  He wanted to know if he should be worried and did we know how to stop it.  The message implied that his Mac was infected and it offered a website to visit, presumably to fix the issue.


 

This is classic scumware and clicking that link to visit telecomservation[.]com could be a major mistake!  It turns out that Google and all of the Internet know nothing about this domain.  A WHOIS service also tells us it was registered anonymously less than 3 weeks earlier in Great Britain through a Chinese company.  Does any of this give any credibility whatsoever to the message “Your Mac is infected?”  It seems like our friend got hit with a browser hijack or scumware extension installed.  We urged him to clear Chrome’s cache and visit the Extensions through the Chrome preferences settings to see what was installed.

Daily Scam Home Page

PHISH NETS
Amazon - Update Your Billing Info

Amazon again. **sigh**  We received this email TWICE, just minutes apart, telling us that we had to update our Amazon billing information.  Of course we didn’t.  The first email came from the domain spedire[.]com and the second came from  edocesign[.]com. (We only show the top half of the 2nd email)  Neither of which are amazon.com.  Both identical emails contained identical links pointing to the domain bre[.]is.  Again, not Amazon.com.  Fortunately, at least two security services have identified this domain as being malicious!

 






Daily Scam Home Page

 

YOUR MONEY
Norton Antivirus and Walmart Value Reward

Both of these next two emails are malicious clickbait and do not represent the company listed in the emails.  This first one, purshing Norton Antivirus Protection, came from a domain, iccicochink[.]com, that was registered to the Chamber of Commerce in Cochin, India.  The malicious link looks like it is for an Outlook server but contains a redirect to chl[.[li.  (Look how they spelled “final”)

Deeeeleeeete!


 

Fake reward survey offers are a theme constantly used by cybercriminals to engineer your clicking behavior.  This one appears to be for Walmart but is malicious, through and through!  This email was sent from a domain registered in February in the United Kingdom and contains links pointing back to it.  Sounds just like Walmart, right?

Delete!


Daily Scam Home Page

 
 

TOP STORY
Reality Online Is Anything But Real

It has been close to a year since we brought attention to the fact that it is exceptionally easy to purchase “likes” and “followers” for social media accounts. (Read the opening Week in Review from March 20. 2019 or our “Your Money” column July 10, 2019.)  What made us think about it again was because we received a super-long email offering to sell us 10,000 Instagram followers for $90, 1,000 Facebook “likes” for $35, or 500 Twitter followers for $20.  All of these things are indeed possible on dozens of websites, like SocialQuicks[.]com, but this email is actually malicious clickbait pretending to be Social Quicks.  The email came from, and links point back to tokdev[.]com, a website that was registered in Pakistan in January.





 

Nevermind that this offer was both fake and malicious, it has to make you wonder whether you can ever believe that followers and likes are ever real!  Do you know that web “influencers” can earn millions of dollars through sponsorships and advertising?  This problem of fake followers and fake likes artificially raising ad revenue for influencers was documented very well in a September, 2019 article by Emma Ellis for Wired Magazine titled Fighting Instagrams $1.3Billion Problem - Fake Followers.   (This article from the Marketing Service Pixlee.com provides several good tips on how to spot fake followers.) 

There are many ways to monetize fake interest in things online, including fake reviews for products and services.  Though the above offer is malicious clickbait, here is a recent real screenshot to purchase fake reviews from Social Quick:

 


 

It begs the question…. How can you trust what anyone is saying online, especially about products and services when it dramatically serves the seller’s interests to have positive reviews?  We routinely read people’s reviews for products before deciding whether or not we want to buy it.  But what is fact and what is fiction?  This is a serious problem.  Fortunately, there are tools available to help you cut through the crap ---assuming you are savvy enough to know there is a lot of fakery out there masquerading as real!  One of the best tools we’ve found to reveal questionable or fake reviews for online products is a free service called Fakespot.com.  The AI for this service claims to be able to spot “suspicious patterns and incentivized reviews.”  They give the product a letter grade reflecting the reliability of both the product, the company selling the product, as well as what they may know about the product availability.

For example, we visited Amazon looking for a new dog bed and found this BarkBox plush orthopedic joint relief crate lounger.  It had a 4.5 star rating from 1255 customer ratings!  Sounds awesome, right?  We copied the URL (link) from our browser and pasted it into the Analyzer window of FakeSpot.com and clicked “analyze.”  The bed received a “D’ grade for “insufficient reliable reviews.”  In addition, the parent company Barkbox was given a “C” rating because nearly 20% of 49 of their reviewed products had been found to be unreliable.





 

Again we went looking for something on Amazon, this time a gaming headset with microphone.  We found this headset by Beexcellent with 1,276 reviews giving it a 4.5 star rating.  Only it wasn’t, according to Fakespot.com.  They downgraded that rating to 3.5 stars and gave the product reviews a “D” rating!





 

You don’t have to conduct all your reviews using Amazon links.  You can copy the link for most consumer products as long as they include website reviews, such as this car audio speaker we found on BestBuy.com.  We were pleased to see that Fakespot rated these 560 reviews as reliable, giving them an “A” grade!

So the next time you are cruising the internet or social media and you see a lot of positive interest in someone or something, we want you to think twice because EVERYTHING can be manipulated online!  Not everything is as it appears to be. 

(Another web service that specifically analyzes reviews on Amazon is ReviewMeta.com.)




Daily Scam Home Page

 


FOR YOUR SAFETY
This Is Your Service Invoice and This Is DHL Express

We received this email very recently into our inbox with the subject line “This is your Service Invoice No. # 19937.”  It came from “Clyde Hall” whose email address begins with “selhamlosin25g9” at AOL.com.  There are so many red flags about this email that we don’t need to download and open the attached old-style Excel file to predict that it contains a malware macro, designed to infect our computers.

A big fat delete!


 

We were contacted recently by a teenager who received the following text claiming to provide a tracking number for her DHL delivery.  As you can imagine, the teen had not placed any order for delivery.  We advised her never to respond to texts like this and don’t click the link.  The text came from the phone number 855-909-0837.  When we looked up the number in Google we found LOTS of people calling this a scam on Scam-Numbers.com.


Until next week, surf safely!

Forward to Friends

About Us
Contact Support
Manage Subscription
Unsubscribe


SUBSCRIBE


Produced by:
Deutsch Creative
 
Copyright © 2020 The Daily Scam, All rights reserved.


Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list

Email Marketing Powered by Mailchimp