REPORT SUMMARY
Date Reported
11th January 2004
Apparent Sender
AOL
Subject
Billing profile update
Senders Address
(spoofed)
(Account Services)
the actual return
address is
bupdateservices
@aol.com
Content
text with a
cloaked link
(see image)
Spoofed Web page/site?
Yes
Web page/site
content
forged AOL web
Web
page/site origin
URL
http://
aol818info.com
Identity Theft method
Web form
information
is captured using
a PHP script
More...
Latest
email
scam
See our guide to
phishing scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
AOL Billing profile update - Email Scam
11th January 2004
Has an error has occurred with your America Online Account? Not this time, its a scam ...
This spoof email (see image below) poses as a notice that there is an error with your AOL account and requests that you use a link to go to an AOL page to 'update your billing information'. Despite the statement that ' AOL Staff will never ask you for your ScreenName or Password via email', that information is exactly what this email is aiming to acquire.
The AOL Support Services link provided actually leads to aol.818info.com which is not a genuine AOL page at all, and is actually a sub-domain of 818info.com which is registered to an individual in Santa Barbara, California, USA and hosted by register.com. Clearly nothing to do with AOL at all.
The forged page looks exactly like a genuine AOL page, and initally shows a 'pop up' alert window beofre opening a forged AOL Billing Information form (see image below). The page code is heavily encrypted, no doubt in an effort to conceal the scammers destination for the data entered, but you can be assured that you will actually pass any information submitted into the form to someone other than AOL. And the financial information, such as your credit card together with its ATM PIN number will be used to your detriment.
If you have received and fallen for this scam, you should contact AOL Support by telephone so that they can secure your account, and you should also notify your card issuer as a matter of urgency.
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
If
you have received this email, please remember that it
is very common for these email scams to be redistributed at a
later date with only slightly different content or the same but with the fake
page(s) hosted by a different provider. Also, once you have received one of
these hoaxes, it is also common place to receive at least another one
and usually a day or two after the first, although not necessarily from
the same apparent sender.
Take a good look at the following images, because this email scam may be coming to an inbox near you!
The Email ...
The fake web page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
