1. Home
  2. Computing & Technology
  3. Internet / Network Security

'Statement Request' Spam

From Tony Bradley, CISSP-ISSAP, for About.com

You may have received a number of emails lately titled 'Statement Request'. The body of the message says:

"Please take a look at the statement on your account. The statement was issued today upon request, and your data has been successfully altered."

I am pointing this spam/phishing attack out because I have received so many recently and they are getting past my Junkmail filter and into my Inbox. But, these attacks are uncharacteristically bad. You can look at the image here to see an example of these emails.

Let's examine all the clues that this email is not legitimate and the signs you could use to avoid becoming a victim:

  • I don't recognize the Sender
  • What kind of email address is 'artichokesdfh313@schillermed.de'?
  • Which institution is this alleged statement supposed to be from?
  • What kind of URL is 'http://artemaliciacapoeira.be'?
  • Hovering over the URL shows that it is not even faked- they really expect me to click on a link from the domain 'artemaliciacapoeira.be'
  • The link in the email leads to an executable file (rep_7330.exe)
  • The email is from 'Jame Banks', but signed by 'Latasha'
More Internet / Network Security Quick Tips
Explore Internet / Network Security
About.com Special Features

Stay connected and entertained with reviews on tips on the latest HDTVs, cellphones and more. More >

Easy ways to connect two computers for networking purposes. More >

  1. Home
  2. Computing & Technology
  3. Internet / Network Security
  4. Email and Phishing Security
  5. 'Statement Request' Spam

©2009 About.com, a part of The New York Times Company.

All rights reserved.