YONKERS, NY — January 23, 2014 — A phishing scam mimics Delta Air Lines. The effort seems so well designed, that it may snare more than a few victims.
Should you be lulled into thinking the links are legitimate, your computer system is coaxed into releasing your private information to the "bad guys", whether your using a PC / Apple. the rest of the addresses go to the bad guys. In addition, the email contains no obvious typos. Overall, this phishing attempt is well done.
In many similar cases, spelling errors may tip off the "victim", yet this message does not create such suspicion. Here is the email message I received today, yet Delata Airlines has yet to acknolwedge the phishing expedition that their toll-free number corroborates is a potentially harmful hoax to steal people's identities.
EVERYTHING BELOW IS USED IN A FRAUDULENT ATTEMPT TO STEAL YOUR IDENTITY. DO NOT CLINK ONTO THE HYPERLINKS. YOU ARE WARNED NOT TO ATTEMPT TO LINK TO THE WEBSITES LISTED.
Your credit card has been successfully processed.
FLIGHT NUMBER DT7803832015
ELECTRONIC 3763996351
DATE & TIME / JAN 26, 2014, 05:38 AM
ARRIVING / Washington
TOTAL PRICE / 479.18 USD
Please download and print your ticket from the following URL :
https://www.delta.com/flifo/servlet/DeltaDLTicket?airline_code=DL&flight_number=DT7803832015&order_date=01/26/2014&request=main
For more information regarding your order, contact us by visiting :
https://www.delta.com/content/www/en_US/support/talk-to-us.html
Thank you
Delta Airlines.
Comments 16
I have been receiving these scam emails almost every day, sometimes two or three per day! Although it is very annoying to have to delete the attachment before deleting the message itself, it has become almost almost automatic due to the sheer volume of them.
One thing that has really caught my eye with these, in addition to the telltale sign that the email does not address me by name, is that the majority of originating email addresses ends in “…repair.com”, otherwise they always end in the letters “air”.com. While I don’t think this is any sort of clue to the perpetrators, I do find it very interesting. For example, two I received yesterday are from “traneairconditioningrepair.com” and “dallastransmissionrepair”, and today’s is from “banyanair.com” (which turns out to be one of the exceptions to ending in “repair”. All of the examples in this comment section follow this observation, with only one that deviates from “repair”.
Anyway, there’s no point in putting a copy in my reply, because they are identical to the ones already here. Stay safe and don’t give these crooks the info they crave.
Here is the email I received yesterday. Spread the word that this is a scam!! Do we need to contact DELTA?
Order Notification,
TICKET NUMBER / ET-30337644
SEAT / 33A/ZONE 3
DATE / TIME 24 OCTOBER, 2014, 08:55 PM
ARRIVING / Tacoma
FORM OF PAYMENT / CC
TOTAL PRICE / 268.30 USD
REF / EK.8595 ST / OK
BAG / 1PC
Your ticket is attached.
You can print your ticket.
Thank you for using our airline company services.
Delta Air Lines.
SCAM ALERT
Order #ID00713196 is processed
Delta Air Lines to youshow details
ET-36265926.zip (100 KB)
Dear Client,
TICKET / ET-23160641
SEAT / 30E/ZONE 3
DATE / TIME 7 OCTOBER, 2014, 11:35 PM
ARRIVING / Pittsburgh
FORM OF PAYMENT / CC
TOTAL PRICE / 226.63 USD
REF / KE.7245 ST / OK
BAG / 2PC
Please find your ticket attached.
To use your ticket you should print it.
Thank you
Delta Air Lines.
I just got the same one!
from Delta Air Lines
Subject: Your ticket #NR00125877
Notification,
E-TICKET / ET-30933497
SEAT / 34F/ZONE 1
DATE / TIME 19 OCTOBER, 2014, 09:45 AM
ARRIVING / Moreno Valley
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 235.83 USD
REF / EF.4494 ST / OK
BAG / 2PC
Your bought ticket is attached.
To use your ticket you should print it.
Thank you for using our airline company services.
Delta Air Lines.
Received today:
E-TICKET NUMBER / ET-72946200
SEAT / 32E/ZONE 1
DATE / TIME 20 OCTOBER, 2014, 09:25 PM
ARRIVING / Worcester
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 236.63 USD
REF / LE.9156 ST / OK
BAG / 1PC
From: “Delta Air Lines” Add to Contacts | Invite Sender | Block SenderFull Header
To: XXXXXX
Sent: Tue, Sep 30, 2014 10:16 AM
ET-55509103.txt (1KB)
Notification,
ELECTRONIC TICKET NUMBER / ET-84440615
SEAT / 19F/ZONE 1
DATE / TIME 23 OCTOBER, 2014, 11:15 PM
ARRIVING / Stockton
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 247.18 USD
REF / KE.0075 ST / OK
BAG / 5PC
Your ticket is attached.
To use your ticket you should print it.
Thank you for using our airline company services.
Delta Air Lines.
——————————————————-
FULL HEADER
Return-Path:
Received: from mx01.dca.untd.com (mx01.dca.untd.com [10.171.44.31])
by maildeliver04.dca.untd.com with SMTP id AABLCXQ3QAHGLC22
for XXXXXXXXXX (sender );
Tue, 30 Sep 2014 07:16:14 -0700 (PDT)
Authentication-Results: mx01.dca.untd.com; DKIM=NONE
Received-SPF: None
Received: from phoenixdentrepair.com
(70-88-146-201-dan-jamison-md.hfc.comcastbusiness.net [70.88.146.201])
by mx01.dca.untd.com with SMTP id AABLCXQ3PA5EKG8S
for XXXXXXXXX (sender );
Tue, 30 Sep 2014 07:16:13 -0700 (PDT)
Message-ID:
From: “Delta Air Lines”
To: XXXXXXXXXXXXXXX
Subject: Download your ticket
Date: Tue, 30 Sep 2014 10:16:13 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”—-=_NextPart_000_0023_01CFDC97.905A1970″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: XimianEvolution1.4.6
X-MimeOLE: Produced By XimianEvolution1.4.6
X-UNTD-BodySize: 107147
X-UNTD-SPF: None
X-UNTD-DKIM: NONE
X-UNTD-SIGN-INFO: 53e564e03df984f010c984f0b09590e0a1a9b08d00a0f000f100a9
X-ContentStamp: 5:2:611443811
X-UNTD-Peer-Info: 70.88.146.201|70-88-146-201-dan-jamison-md.hfc.comcastbusiness.net|phoen
ixdentrepair.com|[email protected]
X-UNTD-UBE:-1
What’s odd is that we ARE flying on the date indicated in the email, but on a different carrier and to a different city.
From: Delta Air Lines ([email protected])
Sent: Tue 9/30/14 1:07 PM
To: XXXXXXX
Dear Client,
ELECTRONIC TICKET NUMBER / ET-54581048
SEAT / 37F/ZONE 3
DATE / TIME 24 OCTOBER, 2014, 12:45 AM
ARRIVING / Toledo
FORM OF PAYMENT / CC
TOTAL PRICE / 223.61 USD
REF / EF.3849 ST / OK
BAG / 6PC
Please find your ticket attached.
You can print your ticket.
Thank you for your attention.
Delta Air Lines.
I received this today. Return email address is “[email protected]”
Dear Customer,
TICKET NUMBER / ET-18044402
SEAT / 25A/ZONE 3
DATE / TIME 20 OCTOBER, 2014, 09:15 AM
ARRIVING / Buffalo
FORM OF PAYMENT / CC
TOTAL PRICE / 223.66 USD
REF / LE.4630 ST / OK
BAG / 4PC
Your electronic ticket is attached to the letter as a scan document.
To use your ticket you should print it.
Thank you
Delta Air Lines.
Dear Client,
ELECTRONIC TICKET NUMBER / ET-71517299
SEAT / 57E/ZONE 2
DATE / TIME 19 OCTOBER, 2014, 09:15 AM
ARRIVING / Pittsburgh
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 278.36 USD
REF / EF.4908 ST / OK
BAG / 7PC
Your electronic ticket is attached to the letter as a scan document.
You can print your ticket.
Thank you for using our airline company services.
Delta Air Lines.
Hello,
TICKET NUMBER / ET-74793452
SEAT / 79E/ZONE 3
DATE / TIME 20 OCTOBER, 2014, 10:45 PM
ARRIVING / Minneapolis
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 278.03 USD
REF / EF.3877 ST / OK
BAG / 3PC
Your ticket is attached.
You can print your ticket.
Thank you for using our airline company services.
Delta Air Lines.
Subject: Please download your ticket #00492380
Order Notification,
TICKET / ET-95486165
SEAT / 71A/ZONE 3
DATE / TIME 6 OCTOBER, 2014, 10:55 PM
ARRIVING / Indianapolis
FORM OF PAYMENT / CC
TOTAL PRICE / 215.21 USD
REF / KE.4925 ST / OK
BAG / 7PC
Please find your ticket attached.
To use your ticket you should print it.
Thank you
Delta Air Lines.
Sent from: Delta Air ([email protected])
Notification,
ELECTRONIC TICKET / ET-59172934
SEAT / 64A/ZONE 2
DATE / TIME 4 OCTOBER, 2014, 09:55 PM
ARRIVING / Fort Worth
FORM OF PAYMENT / CC
TOTAL PRICE / 269.38 USD
REF / KE.4643 ST / OK
BAG / 7PC
Your electronic ticket is attached to the letter as a scan document.
To use your ticket you should print it.
Thank you for your attention.
Delta Air Lines.
Dear Client,
TICKET NUMBER / ET-92833555
SEAT / 27F/ZONE 3
DATE / TIME 29 OCTOBER, 2014, 11:15 AM
ARRIVING / Augusta
FORM OF PAYMENT / CC
TOTAL PRICE / 215.67 USD
REF / LE.9282 ST / OK
BAG / 6PC
Your ticket is attached.
You can print your ticket.
Thank you
Delta Air Lines.
WHAT A BUNCH OF B.S.!
ATT: WORLD: REPENT AND BELIEVE THAT THE GOD OF EVERYTHING CAME IN CHRIST TO SAVE THOSE OF US WHO CHOOSE LIFE! THE KINGDOM OF HEAVEN IS AT HAND! STOP LISTENING TO THE LIES OF THE FALLEN WORLD! ASK AND YOU WILL RECEIVE! THE TRUTH SHALL MAKE YOU FREE!
The email address in brackets next to “Delta Airines” was:
I don’t know why it didn’t copy into my previous message.
I received the following in an email with a zip file attached named ET 79380379. The return address is Delta Air
I have not made any plans to fly to Columbus!
Order Notification,
ELECTRONIC TICKET / ET-94420408
SEAT / 50A/ZONE 2
DATE / TIME 5 OCTOBER, 2014, 11:45 AM
ARRIVING / Columbus
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 270.85 USD
REF / EF.8028 ST / OK
BAG / 2PC
Your ticket is attached.
To use your ticket you should print it.
Thank you for your attention.
Delta Air Lines.
From:
To: XXXXXXXX
Subject: Order #NR00417084 is processed
Date: Mon, 29 Sep 2014 16:15:40 -0400
Notification,
TICKET / ET-81176931
SEAT / 18F/ZONE 1
DATE / TIME 27 OCTOBER, 2014, 11:55 PM
ARRIVING / Lexington
FORM OF PAYMENT / XXXXXX
TOTAL PRICE / 290.15 USD
REF / EF.2005 ST / OK
BAG / 5PC
Your electronic ticket is attached to the letter as a scan document.
To use your ticket you should print it.
Thank you
Delta Air Lines.