Last visit was: Sat Jul 05, 2014 11:25 am
It is currently Sat Jul 05, 2014 11:25 am

IRS "underreported income" scam


All times are UTC - 5 hours [ DST ]


 [ 4 posts ] 
Author Message
 PostPosted: Fri Oct 09, 2009 10:48 am   
New member
User avatar

Joined: Thu Oct 08, 2009 10:51 am
Posts: 1
Location: Boulder Creek, CA, USA
The IRS scam is a significant portion of my mail these days - sometimes a dozen messages overnight. So far I haven't been able to catch the link actually functional, so I assume their strategy is to catch a few unsuspecting souls who are watching their incoming mail during the night and who respond immediately - can't be a large number. It's been a long-running phenomenon, though - hard to believe they haven't been caught yet, after several months.

_________________
--
Bill Walton


Top
 Profile WWW YIM  
 PostPosted: Fri Oct 09, 2009 11:48 am   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
It's Zeus bot.

You can do lots of reading on this:

http://garwarner.blogspot.com/2009/09/i ... inues.html

Previously it was a Michael Jackson story:

http://garwarner.blogspot.com/2009/06/m ... ed-in.html

And before that it was a "Microsoft Update":

http://garwarner.blogspot.com/2009/06/m ... at-is.html

Gar Warner is working with law enforcement to get these domains shut down really, really quickly. Your comment is proof that that's working. On average I receive over 20 of these per day, and out of that usually only one of the messages still has a functioning URL.

SiL


Top
 Profile  
 PostPosted: Fri Oct 09, 2009 12:27 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
The Gar Warner blog updates shed a lot of light on this prolific spam. I receive about a dozen of these day. I even saw one with an attachment, but have since deleted it.


Top
 Profile  
 PostPosted: Fri Oct 09, 2009 7:46 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Thu Mar 01, 2007 3:01 am
Posts: 5915
I thought I found a live one, because spamcop generated a report. Turns out the doofuses parked the domain instead of suspending it. So they'll have thousands of spamcop reports coming in reporting their parked page.


Top
 Profile  
 [ 4 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008