I got a ton of these earlier this week. First clue it’s spam: when you get 10 versions of the same message. I particularly like the randomized “buyer emails” like lorem.eget.mollis@tinciduntDonecvitae.ca. The text was variations on this theme:
Transaction ID 934493892393 Transaction Time : 7/23/2012 03:00 PDT
Your funds are now available
Dear robert@rlweiner.com,
The funds from this eBay payment are now available for use. Check your Transaction Details for more information.
The Transaction Details were hyperlinks to sites that I assume mean to do me harm.
The senders in the first batch showed as service@paypal.com. The subjects were:
Your Ebay funds are cleared.
Your Ebay funds transfer confirmation.
Your Ebay transaction is cleared.
Your Ebay confirmation of your transaction through Paypal.
The main differences were in who was sending me money and how much:
Buyer Marvin Rush
Buyer email auctor.Mauris.vel@facilisislorem.org
Payment total 924,867.68 USD
Buyer Brody Morse
Buyer email Sed.eget@ligulaelit.org
Payment total 873,786.15 USD
Buyer Camden Livingston
Buyer email interdum.enim.non@consequatpurus.org
Payment total 869,751.93 USD
Buyer Michael Oneil
Buyer email lorem.eget.mollis@tinciduntDonecvitae.ca
Payment total 433,779.34 USD
Buyer Amir Edwards
Buyer email interdum.enim.non@consequatpurus.org
Payment total 547,777.87 USD
Buyer Noble Hammond
Buyer email Sed.eget@ligulaelit.org
Payment total 541,829.53 USD
Buyer Axel Higgins
Buyer email interdum.enim.non@consequatpurus.org
Payment total 349,287.35 USD
Buyer Xavier Johnston
Buyer email lorem.eget.mollis@tinciduntDonecvitae.ca
Payment total 819,976.11 USD
Buyer Zeph Potter
Buyer email aliquet.lobortis.nisi@Donecnibhenim.com
Payment total 325,178.68 USD
Buyer Xavier Johnston
Buyer email auctor.Mauris.vel@facilisislorem.org
Payment total 368,538.19 USD
Buyer Daquan Lopez
Buyer email lorem.eget.mollis@tinciduntDonecvitae.ca
Payment total 372,545.24 USD
Wow, can I retire now?
The next day the message morphed, and got much stingier. The senders were:
Ricky Houston
Ofelia Tran
Clinton Kim
Henry Perkins
Vernon Hubbard
Orlando Richards
Wendell Yates
Nathaniel Diaz
Nelson Kirk
Dave Schmidt
Marty Glass
All of the above showed the return address as notify@paypal.com.
The subjects and first lines of the messages were:
Paypal transfer to your bank account initiated.
We are transferring funds from Your Paypal account to your bank account.
We are moving funds from Your Paypal account to your bank account.
We are sending funds from Your Paypal account to your bank account.
The details were variations on:
Total amount transferred $ 198.89
Bank account CITYBANK
Transaction ID 38278764688952115
Total amount transferred $ 279.69
Bank account BANK OF NORTH CAROLINA
Transaction ID 81437999425482479
Total amount transferred $ 761.85
Bank account BANK OF AMERICA
Transaction ID 32479362154583533
The Transaction IDs were hyperlinks.
Leave a Reply