Hi All Wonder if anyone here has come across this before (email text content below), it came with an attached .exe that I haven't opened. Thanks in advance, David -------------------------------------------------------------------------- Hello My name is Dave and I am from the Support of WorldPay. We have received the payment order (ID 0220712,Receipt Date 09/07/2006) from you and we need to make a verification of the details you have filled in, as we have received a notice from your card service stating that there was a chargeback made by the owner of the card with which you have made the payment and that your level of authorization has been altered during your last transaction. This is a very serious matter. We have deducted the amount of the chargeback, GBP 149.89, from your account and added our standard fee of GBP 24.00 as well (you can see your payment details in the attachment). We have failed to contact you using the telephone number you have provided earlier, meeting no response. As a precaution, we have limited access to your account in order to protect against future unauthorized transactions.Please understand that this is a security measure intended to help protect you and your personal information. Please contact your credit card company to resolve this matter. Best Regards, Dave Gollick -------------------------------------------------------------------------
Scam. Note that it has an attachment which is a zip file containing a .exe file. Whatever you do, don't run the .exe file!
I do apologise, I should have mentioned that the reason I ask on this particular group is that a few subscribers on here used to be pretty good at sussing out which of these things were scams and which were genuine. Thanks again, David
Yes, I got that too - despite not even having a WorldPay account. My system subsequently automagically rejected about 25 similar messages also reputably from this lot. I would say delete/reject, it's a scam.
.... I get loads of them. It doesn't seem to be a phishing scam as there's no dodgy link to click so I assume it's a virus. I just delete them. Of course it might infect your PC and make it start sending phishing scams Regards, Ian
Yes, it's a scam. It's *always* a scam I *know* it's a scam cos I got one 1) Sent to my scam address 2) I don't even *have* a worldpay account. HTH -- Catman MIB#14 SKoGA#6 TEAR#4 BOTAFOF#38 Apostle#21 COSOC#3 Tyger, Tyger Burning Bright (Remove rust to reply) Alfa 116 Giulietta 3.0l (Really) Sprint 1.7 75 TS 156 TS S2 Triumph Speed Triple: Black with extra black bits www.cuore-sportivo.co.uk
steve auvache wrote and bugger me if I haven't just this minute got twenty-nine of them. Each and every one dutifully reported.
I'm another one that got it. My virus scanner (NOD32) picked it up before it had finished downloading and deleted a trojan. Time Module Object Name Threat Action User Information 12/07/2006 16:55:04 IMON email message from: "Dave Gollick" <> to: with subject [ORDER ID 0220712] WorldPay Chargeback dated Wed, 12 Jul 2006 15:27:06 -0100 Win32/TrojanDownloader.Small.NIH trojan contained infected files HTH.
Well, just apply Okham's razor, or a bit of common sense: a) Do I have an account with this crew? (cuts about 99.9% of my mail) b) Have I made a payment about this amount with them? i) Yes; then check with them via other channels. ii) No; either ignore it, or check with them via other channels. c) Always reconcile every entry on your bank and CC statements with something you authorised (sometimes difficult because the charging company may be an affiliate with a very different name -- e-mail confirmations of on-line orders help here). -- Ivan Reid, Electronic & Computer Engineering, ___ CMS Collaboration, Brunel University. Ivan.Reid@[brunel.ac.uk|cern.ch] Room 40-1-B12, CERN GSX600F, RG250WD "You Porsche. Me pass!" DoD #484 JKLO#003, 005 WP7# 3000 LC Unit #2368 (tinlc) UKMC#00009 BOTAFOT#16 UKRMMA#7 (Hon) KotPT -- "for stupidity above and beyond the call of duty".
Very much a scam with an attached trojan. The mailserver I run at work got *hundreds* of these. If you run the exe (i did on an isolated machine) it starts a downloader that downloads a password grabber to your PC.
We are getting dozens of them at work at the mo. Subject = [ORDER ID 0220712] WorldPay Chargeback Scanning time = 14/07/2006 11:38:12 Engine/Pattern = 8.000-1001/3.567.00 Action on virus found: The attachment ID 0220712.zip contains TROJ_DLOADER.DEU virus. ScanMail has Deleted it.
