Debunking email hoaxes and exposing Internet scams since 2003!


Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider
Bookmark and Share









Issue 98 - December 2009 - Page 4

Pages in this month's issue:
  1. False Story Claims 450 Gaza Grooms Wed Girls Under Ten in Mass Muslim Marriage
  2. Christopher or Jessica Davies Hacker Hoax Warning
  3. How to Survive a Heart Attack When Alone Hoax
  4. Hotmail Account Closure Phishing Scam
  5. Bungee Jumper Loses Head To Crocodile Video
  6. Egg Windshield Attack Robbery Warning
  7. New US Dollar Notes Preview Hoax
  8. Amazing Device From Google Hoax
  9. Scam Rumours About The Westfield Gift Card Competition on Facebook
  10. Errors in Social Security Statement Trojan Email
  11. Email Exceeded Storage Limit Phishing Scam
  12. Facebook Deleting Inactive Users Hoax

Issue 98 Start Menu

Previous Article            Next Article

Hotmail Account Closure Phishing Scam

Summary:
Email purporting to be from Hotmail Customer Care claims that the recipient must confirm his or her Hotmail account by replying with account login details within 48 hours or risk having the account closed down (Full commentary below).



Status:
Email is not from Hotmail. It is a scam designed to steal webmail login details.

Example:(Submitted, December 2009)
Subject: Windows Live Hotmail Alert!!!

CONFIRM YOUR WINDOWS LIVE ACCOUNT SERVICES. VERIFY YOUR HOTMAIL ACCOUNT NOW TO AVOID IT CLOSED !!!

Dear Account Owner

This Email is from Hotmail Customer Care and we are sending it to every Hotmail Email User Accounts Owner for safety. we are having congestions due to the anonymous registration of Hotmail accounts so we are shutting down some Hotmail accounts and your account was among those to be deleted. We are sending this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below.Your User name, password, date of birth and your country information would be needed to verify your account.

Confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 48 hours for security reasons.

* Username: ................................
* Password: ................................
* Date of Birth: ............................
* Country Or Territory: .................

Sincerely,
The Windows Live Hotmail Team.




Commentary:
This email, which purports to be from the "Windows Live Hotmail Team" claims that the recipient must reply within 48 hours or his or her Hotmail account may be shut down. According to the message Hotmail is "having congestions" due to anonymous registrations and the service needs to delete some accounts to overcome this problem. In order to avoid this imminent account closure, the recipient is instructed to reply to the email and supply his or her Hotmail username and password, along with other details.

However, the email is not from Hotmail or Windows Live. Instead it is a phishing scam designed to steal Hotmail account login details. Those who supply these details as requested will not be verifying their account as they expect. Instead they will be handing over access to their Hotmail or Windows Live accounts to unscrupulous cyber-criminals who will then use it for their own nefarious purposes.

One of the main aims of scammers in hijacking accounts in this way is to gain access to the compromised account's contact list. Once in the hijacked account, the scammers can then send further scam emails to those on the account's contact list that pretend to be from the real account holder. For example, they can send emails in the account holder's name that falsely claim that he or she has become stranded in a foreign country due to a robbery or baggage handling mishap. These emails ask the recipient to send money to help their hapless friend get home. Because the messages are being sent from the hacking victim's own webmail address and are likely to include his or her real name and email signature, at least a few recipients are likely to believe the claims in the email and send money as requested. Of course, the friend is not really stranded overseas and any money sent will be pocketed by scammers. At this early stage of the scam, the real owner of the compromised account may not even be aware that his or her account has been hijacked.

Scammers have used almost identical tactics to target users of other email services including Yahoo. Another, more generic, version of the scam targets users of any webmail service. Other variants take a slightly different approach by claiming that users must submit login details due to a recent system upgrade or because of a technical problem such as an exceeded account storage limit. No legitimate webmail provider is ever likely to request that users send their login details or private information via an email. Any message that makes such a request should be treated with suspicion.

Bookmark and Share



References:
Friend Stranded in Foreign Country Scam Emails
Yahoo Account Phishing Scam Email
Webmail Account Phishing Scam
Email Exceeded Storage Limit Phishing Scam

Previous Article            Next Article

Issue 98 Start Menu

Pages in this month's issue:
  1. False Story Claims 450 Gaza Grooms Wed Girls Under Ten in Mass Muslim Marriage
  2. Christopher or Jessica Davies Hacker Hoax Warning
  3. How to Survive a Heart Attack When Alone Hoax
  4. Hotmail Account Closure Phishing Scam
  5. Bungee Jumper Loses Head To Crocodile Video
  6. Egg Windshield Attack Robbery Warning
  7. New US Dollar Notes Preview Hoax
  8. Amazing Device From Google Hoax
  9. Scam Rumours About The Westfield Gift Card Competition on Facebook
  10. Errors in Social Security Statement Trojan Email
  11. Email Exceeded Storage Limit Phishing Scam
  12. Facebook Deleting Inactive Users Hoax