A new batch of phishing emails, supposedly from TigerDirect.com, went out this week. Using social engineering to make you think that a costly order has been placed in your name, the email seeks to create a sense of urgency that will cause you to click on the links contained in the email, which of course go to the phishing site.
Here’s what the email looks like:
Subject: Your TigerDirect.com Order K7558147 Shipment Update
Date: August 8, 2013 9:50:47 AM MDT
Order Shipped: 08/07/2013
Order No. K7558147
Shipment Total: $568.56
Your order shipped on 08/07/2013 and is on its way to you. Click here to log in to MY ACCOUNT for the latest information on your order.
Below, you’ll find a recap of the shipped item(s):
Pssst! Get notified of new TIP articles here:
(Note: Tracking information may not be available immediately; it may take up to 1 full business day for packages that have reached the shipper to have activity associated with the tracking number. Shipping confirmations for USPS and international shipments as well as for some special order items will not include a tracking number.)
Lenovo H386 Desktop PC – 2nd Gen. Intel Core i7-3290 3.0GHz, 4GB DDR3, 2TB HDD, DVDRW, Windows 8 64-bit, Keyboard & Mouse, (80663160) (T09-C1200 )
(Click Image Above To Track Your Order) Allow 24 hours for the tracking # to appear in the Shippers’ System.
Manufacturer Tech Support: 1-877-453-6686
Manufacturer Tech URL: www.lenovo.com
Again, for the latest information on your order, please click here to log in to MY ACCOUNT. You can also view your Order History, get Invoice Copies, Return Authorizations, add Product Reviews and much more.
Customer Care Team
CHECK OUT THE LATEST DEALS – CLICK HERE
184 State Avenue
Annandale, DC 94526
Your shipping method varies. Please view the chart below for approximate transit times.
Truck Delivery: 7 – 10 Business Days
EconoShip Delivery: 4 – 9 Business Days
UPS Ground: 2 – 7 Business Days
UPS Second Day: 2 Business Days
UPS Next Day Air: 1 Business Day
US Postal Service: 2-3 Business Day Including Saturdays
Saturdays, Sundays and holidays do not count toward the estimated transit days. Packages that leave our fulfillment center on Saturdays, Sundays or holidays will not actually reach the shipper until Monday or the next business day.
Should you have any additional questions regarding your order, please feel free to visit our customer help pages at http://www.tigerdirect.com/help/.
Should you need to exchange or return a product, please visit http://www.tigerdirect.com/sectors/help/return.asp
Other Items to Consider
Search over 100,000 Products in Stock…
Deal Alerts via
TigerDirect.com is not responsible for typographical errors or omissions. This email was sent to firstname.lastname@example.org in response to Order # K7558147.
Call Center Hours of Operation: Mon – Fri: 7am til 1am ET and Sat – Sun: 8am til Midnight ET
For Merchandise Returns: c/o TigerDirect Warehouse – 175 Ambassador Drive, Naperville, IL 60540
Copyright © 2013 – TigerDirect, Inc. 7795 West Flagler Street, Suite 35, Miami, FL 33144 (Corporate Headquarters: No Returns Accepted)
Of course, most of the links take you to the scam site. Here is the section designed to reel you in (note that we have not loaded the images – just as we always caution you not to do). Most people load images by default, which of course allows the email sender to track that you have opened the email. Just imagine how much a scammer can sell your email address for once you’ve confirmed that you read scam emails! Anyways, here is where one of the scam links is – you would think that it takes you to the alleged order on TigerDirect:
But in reality look where it takes you:
Aren’t you glad that you didn’t click on that?
The easiest and quickest way to check whether an email is a phishing email or not is to mouse-over (hover) over the link to see where it really goes. These links are often cloaked behind fake URLs in email (i.e. what appears in the email to say “http://www.tigerdirect.com” will actually go to the scam site), so you can’t trust what seems to be a bare link, always mouse-over it.
Of course, if the email seems to be from an organization with which you actually have an account, the absolute best thing to do is to log in to your account with that company directly (not from a link), and check to see if they actually sent you anything.
(Hey! Please let us know if you liked this article by leaving us a comment!)
You might also like some of our other articles: