Your order #141014122011BED has been charged
A friend forwarded this scam email to me. DO NOT click on any of the links in this email. They will take you to a zip file which contains a Trojan or Worm that will infect your computer. (here’s what happened to someone who accidentally clicked and installed the trojan or worm – http://www.warriorforum.com/main-internet-marketing-discussion-forum/469904-virus-warningthis-will-definitely-save-some-headaches.html)
The links in this email don’t actually go to the yesasia website – they go to yesasia-payment-service.com. This domain name was registered by the scammers today.
From: Order Confirmation [mailto:order-confirmation@yesasia.com]
Sent: 14 October 2011 12:53
To: you@youremail.com
Subject: Your order #141014122011BED has been charged.
Dear Your Name,
Thank you for shopping with YesAsia.com, the No.1 Online Asian Entertainment Store. Your order has been successfully placed. We will process and dispatch your order to you as soon as possible.
To view details of your order go to : http://www.yesasia.com/global/en/secure/ordertracking.html?order=141014122011BED
Username
:
Your name
Order Number
:
447043121
Payment Method
:
Credit Card
Shipping Method
:
Express
Number of Suggested Shipment(s)
:
1
Item Description
Catalog No.
Quantity
Unit Price (USD)
Total (USD)
Logitech QuickCam Ultra Vision
304715754
1
208.99
208.99
Freecom Hard Drive 3.5″ External Hard Drive 500GB
304777221
1
228.99
228.99
Sub-total
:
USD 437.98
Tax
:
USD 0.00
Shipping (Express)
:
USD 45.49
Order Total
:
USD 483.47
Once your payment has been received and verified your payment, your order will be processed. The estimated availability information shown during checkout will only apply after your payment has been verified.
This order confirmation has been automatically generated by our order tracking system.
Should you have any questions about your order, please visit the following website for updated order information details at “My Account”.
Thank you for shopping at YesAsia.com, and please come again!
Yours sincerely,
Customer Service Department
YesAsia.com
October 22, 2011 @ 10:49 am
Received the same email, it was sent to an email address that only eBay/PayPal know. The email contained my real name.
October 14, 2011 @ 8:40 pm
The links connect to a Russian Address (I have not clicked on them but just looked up WHOIS) yesasia-payment-service.com despite USA addresses from Seattle also being present. I was very surprised too by the correct name in the address line.
October 14, 2011 @ 8:08 pm
This one is the second one I have had in as many days. The first being an “account limited” notice purportedly from Paypal. Both also had my real name. A lot of people will be fooled by this.
October 14, 2011 @ 6:52 pm
Same here. Paypal account that has never been used to buy anything, only to receive payments. I can’t see how they could have discovered my name and linked it to that email address unless PayPal (or one of their partners who has access to these basic account details) has been compromised.
October 14, 2011 @ 5:37 pm
Got this email with name and email combination used on PayPal ages ago. Concerning that Paypal may be compromised
October 14, 2011 @ 4:49 pm
I too have the same experience. Got the email today and like you it uses an email address only known to Paypal and ebay and with my full name. So strongly suspect that either Paypal or eBay have been compromised and account lists and names taken. Obviously they are after your password.
October 14, 2011 @ 4:46 pm
I just received this as well. It was sent to an account that I once used only for Paypal, but haven’t for about a year. Also, it could have been used by anyone I’d done a Paypal payment with (Sony Online Entertainment, Blizzard, etc).
Having my full name in the email certainly lent credibility to the scam, as I normally abbreviate my first name for all except officialdom. For a moment I thought I’d had my ID stolen again.
October 14, 2011 @ 4:31 pm
I just received this email and was very worried (thats a polite way of putting it). Thank you so much for putting up this warning, i need a brew now.
October 14, 2011 @ 4:27 pm
Thanks for this. I got a bit worried when I saw an email sent to my PAYPAL address which included my real name. I even tried to login to YesAsia but realised it was just a phish when I saw that they didn’t have any records for my email address.
It’s unlikely that PayPal has been hacked. Your PayPal address is shared with the seller every time you buy something off eBay, a few ebay sellers’ PCs have probably been hacked though.
October 14, 2011 @ 3:09 pm
Got this one today too. Interesting that they knew my name and the email was to the address I only use with paypal. So either paypal have sold my details or got hacked. Not impressed by that at all.
October 14, 2011 @ 3:06 pm
ive recieved this scam today too, googled this as i suspected it was a scam but got worried