Debunking email hoaxes and exposing Internet scams since 2003!


Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider
Bookmark and Share





Issue 84 - August 2008 - Page 2

Pages in this month's issue:
  1. Barack Obama in Afghanistan Protest Email
  2. 'Buy Airplane Ticket Online' Trojan Email
  3. Rottnest Island Great White Shark Hoax
  4. Robert Mugabe Mansion Photographs
  5. Not Able to Deliver UPS Package Malware Email
  6. Prime Minister Howard - Muslims Out Of Australia
  7. Lightning Storm Meets Volcanic Eruption Photos
  8. Ball Girl Wall Climb Catch Video
  9. Google Workplace Photographs - Google's Zurich Office
  10. Google AdWords Phishing Scam
  11. German Truck Art
  12. Lottery Scam Payment Requests - Sky Express Couriers
  13. Diamond Covered Mercedes Photographs
  14. Incredible Chinese Love Story
  15. Johan Lorbeer Gravity Defying Street Performance Photographs
  16. Nadezhda - Russian Dating Scammer
  17. Fake $5 Off Target Coupons

Issue 84 Start Menu

Previous Article            Next Article

'Buy Airplane Ticket Online' Trojan Email

Summary:
Email claims that the recipient has purchased an airline ticket online and should open an attached file to view an invoice and print out the ticket (Full commentary below).



Status:False - Attachment contains a trojan


Example:(Submitted, July 2008)
Subject: E-ticket #4731381568

Good morning,
Thank you for using our new service "Buy airplane ticket Online" on our website.
Your account has been created:

Your login: [email address]
Your password: passDFL6

Your credit card has been charged for $493.67.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%! Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!

Kind regards,
Trudy Cameron
Northwest Airlines



Commentary:
This unsolicited email supposedly advises the recipient that his credit card has been charged for an airline ticket ordered via a specified airline's online ticket service. The message instructs the recipient to open an attached file in order to view an invoice and print out the purchased ticket.

However, the email is not from an airline and the claim that the recipient's credit card has been used to purchase an airline ticket is untrue. The attachment that arrives with the email does not contain an invoice or airline ticket. Instead, opening the attachment can install a variant of the ZBot trojan on the user's computer. The trojan creates files on the infected computer, modifies the Windows registry and allows backdoor connections to and from a remote server.

The malicious email users the names of several different airlines and the amount supposedly charged to the user's credit card may also vary. The message is designed to panic recipients into opening the attachment without due care and attention. Believing that their credit card has been mistakenly charged for an airline ticket that they did not order, some recipients may open the attachment in the hope of gaining more information about the supposed purchase.

If you receive this email, or one similar to it do not open any attachments that it may carry or click on any links that the message may contain.

References:
ZBot trojan attached to flight ticket confirmation
NWA, Sun: Don't open e-mail, it's a scam

Previous Article            Next Article

Issue 84 Start Menu

Pages in this month's issue:
    1. Barack Obama in Afghanistan Protest Email
    2. 'Buy Airplane Ticket Online' Trojan Email
    3. Rottnest Island Great White Shark Hoax
    4. Robert Mugabe Mansion Photographs
    5. Not Able to Deliver UPS Package Malware Email
    6. Prime Minister Howard - Muslims Out Of Australia
    7. Lightning Storm Meets Volcanic Eruption Photos
    8. Ball Girl Wall Climb Catch Video
    9. Google Workplace Photographs - Google's Zurich Office
    10. Google AdWords Phishing Scam
    11. German Truck Art
    12. Lottery Scam Payment Requests - Sky Express Couriers
    13. Diamond Covered Mercedes Photographs
    14. Incredible Chinese Love Story
    15. Johan Lorbeer Gravity Defying Street Performance Photographs
    16. Nadezhda - Russian Dating Scammer
    17. Fake $5 Off Target Coupons