sesam.hu

Engineering Manager | Trail Runner | Stockholm, Sweden

MobileMe phishing scam

Sunday, 2 November, 2008 - sesam

Received the email below today - allegedly from Apple:

mobile me phishing

Not a good fake. For one Apple would never leave a typo in the subject or use full caps for that matter. Checking the source there are a number of clues as well. The from email address is forgeable by a three year old so I leave it at that.

Return-path: <dont_reply_@apple.com>
MIME-version: 1.0
Content-transfer-encoding: 8BIT
Content-type: text/html; charset=Windows-1251
...
Received: from fwspcorp.com ([216.38.98.119])
Received: from User [41.220.75.3] by fwspcorp.com with ESMTP (SMTPD-8.22)
 id A0A1136C; Sat, 01 Nov 2008 17:56:49 -0400
From: dont_reply_@apple.com
Subject: IMPORTANT UPDTAE
Date: Sat, 01 Nov 2008 22:58:37 +0100
X-Priority: 3
X-MSMail-priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-id: <200811011757753.SM04028@User>

No emails from Apple are encoded in Windows-1251, nor do they use Outlook Express to send automated mails. Fort Wayne Structural Products Corporation is either a fake as well, or one of their computer acts as a zombie for sending out phishing emails. Definitely not from Apple though.

Educate yourselves about phishing not to fall victim to such scams. MobileMe has a page to help as well.