Fake AA email

[Flashback]

Just received this and it doesn't look legit ; wonder if anyone else have received something similar?

FLIGHT NUMBER A62943
ELECTRONIC 9750811549
DATE & TIME / DECEMBER 18, 2011, 7:26 PM
ARRIVING / NEW YORK JFK
TOTAL PRICE / 576.87 USD

Please find your ticket attached. To use your ticket you should print it.
Thank you for using our airline company services. American Airlines.

 

[v8Statesman]

Just received this and it doesn't look legit ; wonder if anyone else have received something similar?

I've not got it, but it sets off my SPAM alert in my head reading it.

 

[Flashback]

I've not got it, but it sets off my SPAM alert in my head reading it.

Also the fact that the e-mail was sent to my address, and then a variation of in the CC

 

[QF WP]

The flight number gave it away (to me) in the first instance.

 

[Flashback]

The flight number gave it away (to me) in the first instance.

Yup, missing an A.

 

[Mal]

Not legit.

Attachment will usually be an executable which is named something like ticket94834734.pdf.exe. (normally inside a zip file called the same name).

United, AA, UPS, ATO, Australia Post, DHL, USPS, Fedex, IRS and New York Police are just some of the spoofed companies used in this long running scam.

Running the file will usually install a backdoor, which then downloads and installs "fake antivirus" type software and/or other goodies...

See also Sample Email

 

[Flashback]

Oddly enough for this one it had no attachment, nothing in the AV logs or email headers suggest it was stripped out before delivery either... have seen the UPS one a few times though. The first time I was actually expecting an email from UPS so was lucky I noticed. They do a pretty good job of making it seem real!

Sent from my HTC Desire using AustFreqFly

 

[drron]

it is in USA Today-
American: Beware of fraudulent e-mails - USATODAY.com

 

[simongr]

I basically don't read any emails that either don't have specific identifiable indications that they are genuine (HI Simongr - it was great catching up with you last week when you were wearing a blue shirt and a blue and yellow tie with a flower motif...) or are a response to something I have initiated.

 

[QF WP]

Oooh, look what dropped into my Junk in-box this morning:

Dear Customer,

FLIGHT NUMBER 753-71763806
DATE/TIME : DECEMBER 20, 2011, 14:12 PM
ARRIVING AIRPORT: BOSTON INT. AIRPORT
PRICE : 102.56 USD

Download your ticket here:

You picked the wrong mark, spammer!

 

[MrJetset]

I haven't got it, but my mother rang me in a flap as we redemption bookings this weekend. Interestingly her flights were to Amsterdam so they are altering the contents.

She read it to me, tried to forward it, and my gmail rejected all 3 attempts.

I deduced it was spam as she read it over the phone...

 

[elbarto]

I got it today

Here's what it said.

Dear Customer,

FLIGHT NUMBER AB581
ELECTRONIC 463923425
DATE & TIME / JANUARY 29, 2012, 10:22 AM
ARRIVING / Toledo
TOTAL PRICE / 192.54 USD

Your bought ticket is attached to the letter as a scan document.
You can print your ticket.

Thank you for your attention.
American Airlines.

There's an attached ZIP file which probably contains an executable file, which won't run as I'm on a Mac. But I'm not going to tempt fate by looking inside.

A key give away is that the flight number starts with AB which is Air Berlin. The second being I haven't booked a flight to Toledo.