Malware Threat - Pretend Shopping Receipts

Thought the family should see this—if you get an e-mail saying you ordered something, and you didn’t, DON’T CLICK ON THE LINK IN THE E-MAIL! If you’re really worried, use Google to go to the legitimate company website and call the company. 

Our IT guy at my company is really good about sending us these updates about scams. Usually they are the typical ones about distant relatives in Africa, or something. But as Christmas shopping is happening, I thought this would be relevant for everyone to know. 

Be smart and wise, Family!

Below is his e-mail:

Warning: Phishing Spam - Downloads Install Malware    The JMARK Support Team is issuing an alert as a result of a significant increase in phishing spam. _______________________________________ New Scam Emails Fake Online Order Confirmations To Shoppers By ConsumerWorld   Walmart, Target, and Costco Among Major Retailers Affected Shoppers’ email inboxes have just started being flooded with a timely and potentially dangerous scam. Cybercrooks are sending out authentic-looking order confirmation emails that appear to be from Walmart, Target, and Costco, among others, to lure unsuspecting shoppers to their fake websites, according to ConsumerWorld.org. Upon clicking the link for more information about their supposed order, consumers are taken to a foreign website where a malware-infested .zip file is automatically downloaded to their computer. “This is the perfect crime at the perfect time,” commented Consumer World founder Edgar Dworsky. “Shoppers are busy placing orders between Black Friday and Cyber Monday, so they would naturally expect to find these confirmations in their inbox. And even if they didn’t place an order with the particular retailer, they may believe that a mistake may have taken place and want to see the details.” The subject line of the suspect emails typically says “Thank you for buying from (retailer name).” Consumers who click the link in these emails are taken to various foreign websites. Consumer World recommends that shoppers hover their mouse over any link in a purchase confirmation email and note the exact website they will be taken to before they actually click it. The website address should be displayed either in a bubble above the link or in the status line of the email program. _____________________________________________   Please be cautious of any unsolicited emails and do not download anything from email links. If you believe an email is a legitimate message, please go directly to the site instead of following an link in the email. Please know that receiving and reading the email is not enough to infect your machine. For your machine to be compromised, you must open the link, download the item, and open it.  The malware installed is intended to steal personal information (User names and passwords) from the user.   The best course of action is to delete the email.    If you have downloaded and opened the file, please alert JMARK immediately.  This email has only been distributed to the primary contact at your company.  We encourage you to warn or forward this email to the rest of your company. If you have any questions please contact our service department by email at support@jmark.com, by phone at 417.863.1700 option #2, 479-927-3303 option #2 or 1.800.955.3164 option #2. JMARK Business Solutions, Inc. 601 N. National Ave., Suite 102 Springfield, MO 65802 Phone: (417) 863-1700 Fax: (417) 863-2400 JMARK Business Solutions, Inc. 688 E. Millsap Road, Suite 105 Fayetteville, AR 72703 Phone: (479) 927-3303 Fax: (479) 695-0035