Your Intuit QuickBooks Order Confirmation

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

From - Wed Oct 24 17:26:29 2012
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.56.135 with SMTP id a7csp544046veq;
Tue, 23 Oct 2012 03:58:47 -0700 (PDT)
Received: by 10.66.85.40 with SMTP id e8mr33808267paz.64.1350989927476;
Tue, 23 Oct 2012 03:58:47 -0700 (PDT)
Return-Path: <F40CF91@krumsoe.dk>
Received: from [92.85.253.0] ([92.85.253.0])
by mx.google.com with ESMTP id oo1si17168960pbc.219.2012.10.23.03.58.45;
Tue, 23 Oct 2012 03:58:46 -0700 (PDT)
Received-SPF: neutral (google.com: 92.85.253.0 is neither permitted nor denied by best guess record for domain of
F40CF91@krumsoe.dk) client-ip=92.85.253.0;
Authentication-Results: mx.google.com; spf=neutral (google.com: 92.85.253.0 is neither permitted nor denied by best
guess record for domain of F40CF91@krumsoe.dk) smtp.mail=F40CF91@krumsoe.dk
From: "Intuit QuickBooks" <F40CF91@krumsoe.dk>
To: x
Subject: Your Intuit QuickBooks Order Confirmation
Date: Tue, 23 Oct 2012 21:58:44 +1100
MIME-Version: 1.0
Reply-To: "Intuit No Reply" <231190EE@maxxximo.com>
x-job: 71733_7627
Message-ID: <x@LastXP22>
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Body:

Dear cppgenius@cybertopcops.com,

Thank you for placing an order with Intuit QuickBooks!

We have received your payment information and it is currently being processed.

ORDER INFORMATION

Order #:	27025849530
Order Date:	Oct 22, 2012

[ View order ]

Qty	Item	Price
1	Intuit QuickBooks Pro Download 2 2012	$183.96***
	Subtotal: Sales Tax: Total for this Order:	$183.96 $0.00 $183.96

*Appropriate credit will be applied to your account.

Please Note: Sales tax calculations are estimated. The final sales tax calculation will comply with local regulations.

NEED HELP?

Questions about your order? Please visit Customer Service.

Join Us On Facebook

Close More Sales

Save Time

Privacy | Legal | Contact Us | About Intuit

You have received this business communication as part of our efforts to fulfill your request or service your account. You may receive this and other business communications from us even if you have opted out of marketing messages.

If you receive an email message that appears to come from Intuit but that you suspect is a phishing email, please forward it immediately to spoof@intuit.com. Please visit http://security.intuit.com/ for additional security information.

Please note: This email was sent from an auto-notification system that cannot accept incoming email. Please do not reply to this message.

© 2012 Intuit Inc. or its affiliates. All rights reserved.

Comments:

From: "Intuit QuickBooks" <F40CF91@krumsoe.dk>

This e-mail clearly did not come from Intuit. The scammers were so lazy they did not even try to spoof the From address.

Dear whatever@e-mailaddress

You can't get any more lame than this. A client has a name and likes to be called that name. Nobody addresses someone by his/her e-mail address, that's just downright silly and stupid and is a clear give away that this e-mail is a scam.

Every link in the original e-mail points to a different phishing or malware site, maximising the chances of catching the victim.

The scammers are bargaining on catching two groups of victims here. The one group who will panic because they did not order the product mentioned in the e-mail and will blindly click on the links in the hope of rectifying the 'billing error'. The other group will panic due to a recent order of the same product and will click on the links to cancel the 'duplicate order'.

This is a very professional phishing scam, capitalising on the panic attacks of unsuspecting victims. Phishing scammers know people do not think straight when they panic, so they go out of their way to put the victim into panic mode.

You can read more about this type of scam at the following link:
http://security.intuit.com/alert.php?a=66

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

Fake Intuit Malware Spam E-mails - Dowload your Intuit.com invoice.
INTUIT Phishing Scam - Employer contributions report
UPS Phishing Scam - UPS Tracking Number H4122908562
Better Business Bureau Phishing Scam Case #690840567
IRS Phishing Scam - IRS: Important information

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]