The “Copies of Policies” and “Changelog as Promised” Spams (Yes, They are Scam Spam, Don’t Open Them!)

The Internet Patrol - Patrolling the Internet for You

A new crop of scam spam is going around, with subjects like “Copies of Policies” and “Changelog as Promised” and talking about things like the “Ocean, Warehouse or EPLI policy”. They are short – to the point – and spam scams. They contain links that go to malicious sites such as flexjobb[dot]se/wp-content/plugins/mail.htm, and http://www.39moto[dot]ru/wp-content/plugins/flv-player/mail.htm, and come from sender names including Brock Buchanan, Darien Forbes, A. Simmons, and A. Blanton.

Here’s what they look like to the naked eyes:


Subject: RE: Brock – Copies of Policies.
Date: October 15, 2012 12:16:59 AM MDT

Unfortunately, I cannot obtain electronic copies of the Ocean, Warehouse or EPLI policy.

No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free?
Click for amount options
Other Amount:
What info did you find here today?:

 

Here is the Package and Umbrella,
and a copy of the most recent schedule.

Brock Buchanan,

This one also appears to com from “Darien Forbes”

 

Another version looks like this:

Subject: Fwd: Re: Changelog as promised(updated)
Date: October 15, 2012 6:39:52 AM MDT

Good day,
as promised chnglog updated – View

A. BLANTON

..which also comes from “A. Simmons”

 

But of course, when you click on the links, it takes you to those malicious sites, and when you inspect the links, they look like this:


Unfortunately, I cannot obtain electronic copies of the Ocean, Warehouse or EPLI policy.

abstract.nassassin[dot]com:80/wp-content/plugins/counterize/mail.htm/ is the Package and Umbrella,
and a abstract.nassassin[dot]com:80/wp-content/plugins/counterize/mail.htm/ of the most recent schedule.

Brock Buchanan,

Interestingly, the text of these emails is so specific – we mean who would actually get hooked by concerns about an “Ocean, Warehouse or EPLI policy”? (EPLI stands for “Employment Practices Liability Insurance”.)

And yet, as is so often the case, these spammer scammers send out milliions of these, and so they only need a tiny fraction of a percent of people to click on the links to make it worth it for them.

Don’t make it worth it for them! If you are reading email through a webmail service such as Gmail, Hotmail, Yahoo, AOL, etc., click “this is spam” without opening the email! And if you are reading it through your own mail program, be sure not to open it.

No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free?
Click for amount options
Other Amount:
What info did you find here today?:

Leave a Reply

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.