Who feels like finding some phish? My step-daughter received three emails supposedly from a bank, that she doesn't do business with, stating that an online account had been set up and that the password had been changed.
At first, one would think that obviously these are phishing emails or perhaps, and outside possibility that someone had opened an account in her name. With regard to the latter thought, if so, why put down her email address unless they also hacked her email account and forwarded copies of her emails (or changed her password). Neither of those things has happened. One of the emails states that a copy was sent to her "secure email address" as verification, but again, why have a copy of the emails go to her actual email? So, back to the phishing thought. One of the emails had a Customer Service number (I know, Aha, that's it!). But, that phone number pops appears legit. I did; however, find a reference to Harshad numbers and spammers, but haven't been able to get any concrete information on that line. The 2nd email had an image attached to it with the bank's logo. My thought here was that something was embedded in the image. But, I have no way to really determine that. Finally, in none of the emails was there any links that pointed anywhere strange or any javascript (I have the original emails in the Gmail "Show Original" format, which includes the raw message along with the Base64 encoded image file). I didn't want to send an email with attachments to the list, so if anyone wants to see if they can find the phish (or purpose of the emails), reply back and I'll forward you a copy of the "Show Original" emails. Mike
